OpenAirInterface Core Network UDM stack buffer overflow
A 5G authentication server can be crashed, and possibly hacked.
Summary
An oversized value in the UDM's authentication data request causes a stack buffer overflow in OpenAirInterface Core Network. An unauthenticated attacker with SBI access can terminate the UDM process, and code execution may be possible in theory.
Affected when
- Access to the SBI interface
- A valid SUPI (subscriber identity)
What to do
No fixed version is named in the sources. Check the project's advisory for a release newer than v2.2.1.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen