Vulnerabilities > CVE-2024-24427 - Reachable Assertion vulnerability in Open5Gs

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

open5gs

CWE-617

NVD

Published: 2025-01-21

Updated: 2025-01-24

Summary

A reachable assertion in the amf_ue_set_suci function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

Vulnerable Configurations

Part	Description	Count
Application	Open5Gs Open5Gs Open5Gs - Open5Gs Open5Gs 0.1.0 Open5Gs Open5Gs 0.1.1 Open5Gs Open5Gs 0.2.0 Open5Gs Open5Gs 0.3.0 Open5Gs Open5Gs 0.3.1 Open5Gs Open5Gs 0.3.2 Open5Gs Open5Gs 0.3.3 Open5Gs Open5Gs 0.3.4 Open5Gs Open5Gs 0.3.5 Open5Gs Open5Gs 0.3.6 Open5Gs Open5Gs 0.3.7 Open5Gs Open5Gs 0.3.8 Open5Gs Open5Gs 0.3.9 Open5Gs Open5Gs 0.3.10 Open5Gs Open5Gs 0.3.11 Open5Gs Open5Gs 0.4.0 Open5Gs Open5Gs 0.4.1 Open5Gs Open5Gs 0.4.2 Open5Gs Open5Gs 0.4.3 Open5Gs Open5Gs 0.4.4 Open5Gs Open5Gs 0.5.0 Open5Gs Open5Gs 0.5.1 Open5Gs Open5Gs 0.5.2 Open5Gs Open5Gs 1.0.0 Open5Gs Open5Gs 1.1.0 Open5Gs Open5Gs 1.2.0 Open5Gs Open5Gs 1.2.1 Open5Gs Open5Gs 1.2.2 Open5Gs Open5Gs 1.2.3 Open5Gs Open5Gs 1.2.4 Open5Gs Open5Gs 1.3.0 Open5Gs Open5Gs 2.0.0 Open5Gs Open5Gs 2.0.18 Open5Gs Open5Gs 2.0.20 Open5Gs Open5Gs 2.0.21 Open5Gs Open5Gs 2.0.22 Open5Gs Open5Gs 2.1.0 Open5Gs Open5Gs 2.1.1 Open5Gs Open5Gs 2.1.3 Open5Gs Open5Gs 2.1.4 Open5Gs Open5Gs 2.1.5 Open5Gs Open5Gs 2.1.7 Open5Gs Open5Gs 2.2.0 Open5Gs Open5Gs 2.2.1 Open5Gs Open5Gs 2.2.2 Open5Gs Open5Gs 2.2.3 Open5Gs Open5Gs 2.2.4 Open5Gs Open5Gs 2.2.5 Open5Gs Open5Gs 2.2.6 Open5Gs Open5Gs 2.2.7 Open5Gs Open5Gs 2.2.8 Open5Gs Open5Gs 2.2.9 Open5Gs Open5Gs 2.3.0 Open5Gs Open5Gs 2.3.1 Open5Gs Open5Gs 2.3.2 Open5Gs Open5Gs 2.3.3 Open5Gs Open5Gs 2.3.4 Open5Gs Open5Gs 2.3.6 Open5Gs Open5Gs 2.4.0 Open5Gs Open5Gs 2.4.1 Open5Gs Open5Gs 2.4.2 Open5Gs Open5Gs 2.4.3 Open5Gs Open5Gs 2.4.4 Open5Gs Open5Gs 2.4.5 Open5Gs Open5Gs 2.4.6 Open5Gs Open5Gs 2.4.7 Open5Gs Open5Gs 2.4.8 Open5Gs Open5Gs 2.4.9 Open5Gs Open5Gs 2.4.10 Open5Gs Open5Gs 2.4.11 Open5Gs Open5Gs 2.4.12 Open5Gs Open5Gs 2.4.13 Open5Gs Open5Gs 2.5.6 Open5Gs Open5Gs 2.5.7	75

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

References

https://cellularsecurity.org/ransacked