CVE-2024-34475

Опубликовано: 05 мая 2024

Источник: nvd

CVSS3: 7.5

EPSS Низкий

Описание

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.

Ссылки

https://github.com/open5gs/open5gs/compare/v2.7.0...v2.7.1
Release Notes
Vendor Advisory
https://github.com/open5gs/open5gs/pull/3122
Issue Tracking
Vendor Advisory
https://github.com/open5gs/open5gs/compare/v2.7.0...v2.7.1
Release Notes
Vendor Advisory
https://github.com/open5gs/open5gs/pull/3122
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

Версия до 2.7.1 (исключая)

EPSS

Процентиль: 43%

0.00207

Низкий

7.5 High

CVSS3

Дефекты

CWE-617

Связанные уязвимости

CVE-2024-34475

CVSS3: 7.5

debian

почти 2 года назад

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can c ...

GHSA-5q6f-3g3m-rjw9

CVSS3: 7.5

github

почти 2 года назад

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.

EPSS

Процентиль: 43%

0.00207

Низкий

7.5 High

CVSS3

Дефекты

CWE-617