OpenAirInterface CN5G AMF NAS decoder flaw lets unauthenticated attackers crash it
A 5G network's access management server can be stopped by one crafted request.
Summary
An integer truncation flaw in the NAS decoder of OpenAirInterface CN5G AMF v2.2.1 lets an unauthenticated remote attacker crash the AMF process with crafted registration requests. Anyone who can send such requests over N2 from a rogue gNB can trigger it.
Affected when
- Reachable N2 (NGAP/SCTP) interface, such as from a rogue gNB
What to do
We have not confirmed a fixed version yet. Check the source links below.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen