CVE-2023-37011

MEDIUM Year: 2023
CVSS v3 Score
6.3
Medium
Weakness Type
CWE-617
View all →

Vulnerability Description

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Required` message missing a required `MME_UE_S1AP_ID` field to repeatedly crash the MME, resulting in denial of service.

Related Vulnerabilities

CVE-2023-37009

MEDIUM
CVSS:6.3(Medium)

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send a `Handover Notification` message missing a...

CWE-6172023

CVE-2023-37010

MEDIUM
CVSS:6.3(Medium)

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker may send an `eNB Status Transfer` message missing a ...

CWE-6172023

CVE-2024-33255

MEDIUM
CVSS:6.2(Medium)

Jerryscript commit cefd391 was discovered to contain an Assertion Failure via ECMA_STRING_IS_REF_EQUALS_TO_ONE (string_p) in ecma_free_string_list.

CWE-6172024

CVE-2006-6811

MEDIUM
CVSS:6.5(Medium)

KsIRC 1.3.12 allows remote attackers to cause a denial of service (crash) via a long PRIVMSG string when connecting to an Internet Relay Chat (IRC) server, which causes an assertion failure and result...

CWE-6172006

CVE-2012-5521

MEDIUM
CVSS:6.5(Medium)

quagga (ospf6d) 0.99.21 has a DoS flaw in the way the ospf6d daemon performs routes removal

CWE-6172012

CVE-2017-11368

MEDIUM
CVSS:6.5(Medium)

In MIT Kerberos 5 (aka krb5) 1.7 and later, an authenticated attacker can cause a KDC assertion failure by sending invalid S4U2Self or S4U2Proxy requests.

CWE-6172017