CVE-2024-24451
HighCVSS 7.5Exploitation Probability (EPSS)
Elevated risk55th percentile - higher than 55% of all known CVEs
Summary
A stack overflow vulnerability exists in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to version 2.0.0. An attacker can repeatedly establish SCTP connections over the N2 interface, causing a system crash.
Risk Assessment
The risk is a Denial of Service (DoS) attack on the AMF function, potentially disrupting 5G network operations and service availability.
Recommendation
Immediately upgrade OpenAirInterface CN5G AMF to a version later than 2.0.0 that includes a fix for the stack overflow. Additionally, limit the number of allowed SCTP connections on the N2 interface.
Other vulnerabilities in OpenAirInterface CN5G AMF
See all- CVE-2025-66786High
OpenAirInterface CN5G AMF up to version 2.0.1 has a logical error when processing JSON format requests. Unauthorized remote attackers can send malicious JSON data to the AMF's SBI interface to launch a denial-of-service attack.
- CVE-2025-65805High
OpenAirInterface CN5G AMF up to version 2.1.9 has a buffer overflow vulnerability in processing NAS messages. Unauthorized remote attackers can launch a denial-of-service attack and potentially execute malicious code by sending an imsi string longer than 1000 to port N1.
- CVE-2024-24443Medium
An uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted PDU Session Resource Setup Response.
- CVE-2024-24445Medium
A null dereference vulnerability in OpenAirInterface CN5G AMF (oai-cn5g-amf) version 2.0.0 and earlier occurs when handling unsupported NGAP protocol messages. An attacker with network-adjacent access can trigger a denial of service.
- CVE-2024-24444High
In OpenAirInterface CN5G AMF up to version 2.0.0, improper file descriptor handling for closed connections was found. An attacker can repeatedly establish SCTP connections via the N2 interface, leading to resource exhaustion and Denial of Service (DoS).
- CVE-2024-24442High
A NULL pointer dereference in the ngap_app::handle_receive routine of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) via a crafted NGAP message.
Original NVD description (English source)
A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface.