Saint Ransacked

Technical record

Disclosed on

October 16 2024

CVE

CVE-2024-24445CVE-2024-24450CVE-2024-24447CVE-2024-24451CVE-2024-24444CVE-2024-24442CVE-2024-24449

CVSS

7.5

OpenAirInterface CN5G AMF (oai-cn5g-amf) <= 2.0.0 contains a null dereference in its handling of unsupported NGAP protocol messages which allows an attacker with network-adjacent access to the AMF to carry out denial of service. When a procedure code/presence field tuple is received that is unsupported, OAI indexes into a null function pointer and subsequently dereferences it.

Sources: cellularsecurity.org · sigsac.org