CVE-2026-117067: Security vulnerability

Published Nov 2, 2026

Updated

An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FDSET() operation.

Event History

Nov 2, 2026

CVE Published

via NVD·06:18 PM

Data Sourced

via NVD·06:18 PM

Description

Frequently Asked Questions

What access does an attacker need to trigger the crash?

An attacker can exploit the issue remotely without authentication by repeatedly establishing SCTP associations to the AMF's N2 SCTP interface.

What component is exposed to denial of service?

The affected component is the OpenAirInterface CN5G AMF N2 SCTP interface. Repeated SCTP associations can cause the AMF process to crash because file descriptor bounds are not checked before FD_SET() is used.

How can I determine whether my deployment is affected?

The provided information identifies OAI CN5G AMF v2.2.1 as affected. Deployments using that version with an externally reachable N2 SCTP interface should be treated as exposed to the described remote denial-of-service condition.

CVE-2026-117067: Security vulnerability

Event History

Frequently Asked Questions

What access does an attacker need to trigger the crash?

What component is exposed to denial of service?

How can I determine whether my deployment is affected?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to trigger the crash?

What component is exposed to denial of service?

How can I determine whether my deployment is affected?