openairinterface/openair-epc-fed

openairinterface/openair-epc-fed

Releases17

Frequency1 month 3 days

Last Release over 4 years ago

Stars72

Federation of all Open-Air-CN components

Log in to subscribe

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2024-24426 ↗	Nov 15, 2024Friday, 15 November 2024, 19:15	7.5 HIGH	—
Reachable assertions in the NGAP_FIND_PROTOCOLIE_BY_ID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.
CVE-2024-24425 ↗	Nov 15, 2024Friday, 15 November 2024, 19:15	6.5 MEDIUM	—
Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.