Description
Open5GS MME versions <= 2.6.4 contain a buffer overflow in the ASN.1 deserialization function of the S1AP handler. This buffer overflow causes type confusion in decoded fields, leading to invalid parsing and freeing of memory. An attacker may use this to crash an MME or potentially execute code in certain circumstances.
INFO
Published Date :
2025-01-22T00:00:00.000Z
Last Modified :
2025-01-28T21:19:16.362Z
Source :
mitre
AFFECTED PRODUCTS
The following products are affected by CVE-2023-37008 vulnerability.
| Vendors | Products |
|---|---|
| Open5gs |
|
REFERENCES
Here, you will find a curated list of external links that provide in-depth information to CVE-2023-37008.
| URL | Resource |
|---|---|
| https://cellularsecurity.org/ransacked |
|
CVSS Vulnerability Scoring System
Detailed values of each vector for above chart.
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality Impact
Integrity Impact
Availability Impact