Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-4mwx-vgq4-7vr5

Опубликовано: 22 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.3

Описание

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Setup Response message missing a required MME_UE_S1AP_ID field to repeatedly crash the MME, resulting in denial of service.

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an E-RAB Setup Response message missing a required MME_UE_S1AP_ID field to repeatedly crash the MME, resulting in denial of service.

EPSS

Процентиль: 2%
0.00016
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVSS3: 5.3
nvd
10 месяцев назад

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `E-RAB Setup Response` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service.

CVSS3: 5.3
debian
10 месяцев назад

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotel ...

CVSS3: 5.3
fstec
почти 2 года назад

Уязвимость компонента управления мобильностью MME средства создания и управления мобильной сетью NR/LTE Open5GS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 2%
0.00016
Низкий

5.3 Medium

CVSS3

Дефекты

CWE-617