Threats affecting pkg:github/open5gs

119 threats

Severity	CVSS	Signals	Threat	Source	Published
Critical	9.8	EPSS 0.6%	CVE-2024-40130open5gs · Classic Buffer Overflow Critical9.8EPSS 0.6%2024-07-16CVE Database V5CVE-2024-40130 open5gs v2.6.4 is vulnerable to Buffer Overflow.via /lib/core/abts.c. EPSS 0.6%Vulnerability CWE-120	CVE Database V5	2024-07-16
High	8.6	EPSS 0.5%	CVE-2024-40129open5gs · Heap-based Buffer Overflow High8.6EPSS 0.5%2024-07-16CVE Database V5CVE-2024-40129 Open5GS v2.6.4 is vulnerable to Buffer Overflow.via /lib/pfcp/context.c. EPSS 0.5%Vulnerability CWE-122	CVE Database V5	2024-07-16
Medium	5.3	EPSS 0.5%	CVE-2024-34476open5gs · Buffer Access with Incorrect Length Value Medium5.3EPSS 0.5%2024-05-04CVE Database V5CVE-2024-34476 Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nas/common/security.c for pkbuf->len. EPSS 0.5%Vulnerability CWE-805	CVE Database V5	2024-05-04
High	7.5	EPSS 0.6%	CVE-2024-34475open5gs · Reachable Assertion High7.5EPSS 0.6%2024-05-04CVE Database V5CVE-2024-34475 Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: gmm_state_authentication in amf/gmm-sm.c for != OGS_ERROR. EPSS 0.6%Vulnerability CWE-617	CVE Database V5	2024-05-04

Page 7 of 7