| शीर्षक | Linux Foundation Projects Magma 5G v1.9.0 State Issue |
|---|
| विवरण | AMF accepts message without NGSetup process has been successful. No initial check, malicious actor can send arbitrary messages to cause service disruption or denial of service.
As per specification NGSetupRequest should be the first message after establishing the SCTP channel. But Magma accepts any message and process without NGSetupRequest has been successfully completed. AMF should reject message if there is no NGSetup has been successful.
To Reproduce
Start Magma Core with 5G support enabled and default configuration
Connect the gNB.
Send InitialUEMessage
NGAP Message:
00 0f 40 45 00 00 05 00 55 00 02 00 02 00 26 00 1b 1a 7e 00 41 79 00 0d 01 00 f1 10 00 00 00 00 00 00 00 00 10 2e 02 f0 80 10 01 00 00 79 00 0f 40 00 f1 10 00 00 00 00 00 00 f1 10 00 00 07 00 5a 40 01 18 00 70 40 01 00 |
|---|
| स्रोत | ⚠️ https://github.com/magma/magma/issues/16021 |
|---|
| उपयोगकर्ता | shovon0203 (UID 96191) |
|---|
| सबमिशन | 15/07/2026 06:56 AM (2 महीनों पहले) |
|---|
| संयम | 29/08/2026 08:44 PM (2 months later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 397067 [Linux Foundation Magma 1.9.0 NGSetup ngap_amf_handlers.c अधिकार वृद्धि] |
|---|
| अंक | 20 |
|---|