CVE-2024-34475

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-617

Affected software

Vendor	Product	Versions
n/a	n/a	n/a
open5gs	open5gs	2.7.1

References

https://github.com/open5gs/open5gs/compare/v2.7.0...v2.7.1Release Notes, Vendor Advisory
https://github.com/open5gs/open5gs/pull/3122Issue Tracking, Vendor Advisory
https://github.com/open5gs/open5gs/compare/v2.7.0...v2.7.1Release Notes, Vendor Advisory
https://github.com/open5gs/open5gs/pull/3122Issue Tracking, Vendor Advisory

Timeline

Published: May 5, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-344765.3Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/n CVE-2024-344777.8configureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because CVE-2024-344787.5btcd before 0.24.0 does not correctly implement the consensus rules outlined in BIP 68 and BIP 112, making it susceptible to consensus failu CVE-2024-344799.8SourceCodester Computer Laboratory Management System 1.0 allows classes/Master.php id SQL Injection.CVE-2024-34485.0Users with low privileges can perform certain AJAX actions. In this vulnerability instance, improper access to ajax?action=plugin:focus:che CVE-2024-344809.8SourceCodester Computer Laboratory Management System 1.0 allows admin/category/view_category.php id SQL Injection.CVE-2024-344816.1drupal-wiki.com Drupal Wiki before 8.31.1 allows XSS via comments, captions, and image titles of a Wiki page.CVE-2024-344837.5OFPGroupDescStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPBucket.len=0.CVE-2024-344845.3OFPBucket in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via action.len=0.CVE-2024-344867.5OFPPacketQueue in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via OFPQueueProp.len=0.CVE-2024-344877.5OFPFlowStats in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via inst.length=0.CVE-2024-344887.5OFPMultipartReply in parser.py in Faucet SDN Ryu 4.34 allows attackers to cause a denial of service (infinite loop) via b.length=0.