medium5.3
CVE-2024-24450
Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacke…
Impact
Stack-based memcpy buffer overflow in the ngap_handle_pdu_session_resource_setup_response routine in OpenAirInterface CN5G AMF <= 2.0.0 allows a remote attacker with access to the N2 interface to carry out denial of service against the AMF and potentially execute code by sending a PDU Session Resource Setup Response with a suffciently large FailedToSetupList IE.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| OpenAirInterface | OpenAirInterface CN5G AMF | through 2.0.0 |
Versions were read from the advisory text. No structured product data has been published for this record yet.