CVE-2024-24446: Null Pointer Dereference
Published Nov 15, 2024
·Updated
An uninitialized pointer dereference in OpenAirInterface CN5G AMF up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted InitialContextSetupResponse message sent to the AMF.
Affected Software
1 affected component
openairinterface CN5G AMF<2.0.0
Event History
Nov 15, 2024
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·07:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2024-24446?
CVE-2024-24446 is classified as a Denial of Service vulnerability, which can disrupt service availability.
2
How do I fix CVE-2024-24446?
To fix CVE-2024-24446, upgrade OpenAirInterface CN5G AMF to version 2.0.0 or later.
3
What impact does CVE-2024-24446 have on OpenAirInterface CN5G AMF?
CVE-2024-24446 allows attackers to cause a Denial of Service by sending a malicious InitialContextSetupResponse message to the AMF.
4
Who is affected by CVE-2024-24446?
CVE-2024-24446 affects users of OpenAirInterface CN5G AMF versions prior to 2.0.0.
5
Is there a known exploit for CVE-2024-24446?
Yes, CVE-2024-24446 can be exploited remotely through crafted messages, leading to service disruption.