Vulnerabilities > CVE-2024-24428 - Reachable Assertion vulnerability in Open5Gs

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

open5gs

CWE-617

NVD

Published: 2025-01-21

Updated: 2025-01-24

Summary

A reachable assertion in the oai_nas_5gmm_decode function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP packet.

Vulnerable Configurations

Part	Description	Count
Application	Open5Gs Open5Gs Open5Gs - Open5Gs Open5Gs 0.1.0 Open5Gs Open5Gs 0.1.1 Open5Gs Open5Gs 0.2.0 Open5Gs Open5Gs 0.3.0 Open5Gs Open5Gs 0.3.1 Open5Gs Open5Gs 0.3.2 Open5Gs Open5Gs 0.3.3 Open5Gs Open5Gs 0.3.4 Open5Gs Open5Gs 0.3.5 Open5Gs Open5Gs 0.3.6 Open5Gs Open5Gs 0.3.7 Open5Gs Open5Gs 0.3.8 Open5Gs Open5Gs 0.3.9 Open5Gs Open5Gs 0.3.10 Open5Gs Open5Gs 0.3.11 Open5Gs Open5Gs 0.4.0 Open5Gs Open5Gs 0.4.1 Open5Gs Open5Gs 0.4.2 Open5Gs Open5Gs 0.4.3 Open5Gs Open5Gs 0.4.4 Open5Gs Open5Gs 0.5.0 Open5Gs Open5Gs 0.5.1 Open5Gs Open5Gs 0.5.2 Open5Gs Open5Gs 1.0.0 Open5Gs Open5Gs 1.1.0 Open5Gs Open5Gs 1.2.0 Open5Gs Open5Gs 1.2.1 Open5Gs Open5Gs 1.2.2 Open5Gs Open5Gs 1.2.3 Open5Gs Open5Gs 1.2.4 Open5Gs Open5Gs 1.3.0 Open5Gs Open5Gs 2.0.0 Open5Gs Open5Gs 2.0.18 Open5Gs Open5Gs 2.0.20 Open5Gs Open5Gs 2.0.21 Open5Gs Open5Gs 2.0.22 Open5Gs Open5Gs 2.1.0 Open5Gs Open5Gs 2.1.1 Open5Gs Open5Gs 2.1.3 Open5Gs Open5Gs 2.1.4 Open5Gs Open5Gs 2.1.5 Open5Gs Open5Gs 2.1.7 Open5Gs Open5Gs 2.2.0 Open5Gs Open5Gs 2.2.1 Open5Gs Open5Gs 2.2.2 Open5Gs Open5Gs 2.2.3 Open5Gs Open5Gs 2.2.4 Open5Gs Open5Gs 2.2.5 Open5Gs Open5Gs 2.2.6 Open5Gs Open5Gs 2.2.7 Open5Gs Open5Gs 2.2.8 Open5Gs Open5Gs 2.2.9 Open5Gs Open5Gs 2.3.0 Open5Gs Open5Gs 2.3.1 Open5Gs Open5Gs 2.3.2 Open5Gs Open5Gs 2.3.3 Open5Gs Open5Gs 2.3.4 Open5Gs Open5Gs 2.3.6 Open5Gs Open5Gs 2.4.0 Open5Gs Open5Gs 2.4.1 Open5Gs Open5Gs 2.4.2 Open5Gs Open5Gs 2.4.3 Open5Gs Open5Gs 2.4.4 Open5Gs Open5Gs 2.4.5 Open5Gs Open5Gs 2.4.6 Open5Gs Open5Gs 2.4.7 Open5Gs Open5Gs 2.4.8 Open5Gs Open5Gs 2.4.9 Open5Gs Open5Gs 2.4.10 Open5Gs Open5Gs 2.4.11 Open5Gs Open5Gs 2.4.12 Open5Gs Open5Gs 2.4.13 Open5Gs Open5Gs 2.5.6 Open5Gs Open5Gs 2.5.7	75

Common Weakness Enumeration (CWE)

CWE-617 - Reachable Assertion

References

https://cellularsecurity.org/ransacked