CVE-2024-56921

An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of gmm_state_exception() function upon receipt of the Nausf_UEAuthentication_Authenticate response.
CVSS

No CVSS.

Configurations

Configuration 1 (hide)

cpe:2.3:a:open5gs:open5gs:2.7.2:*:*:*:*:*:*:*

History

22 Apr 2025, 14:58

Type Values Removed Values Added
References () https://github.com/open5gs/open5gs/commit/f780f9af45c27b6f49987d96ba71dedb3dd85840 - () https://github.com/open5gs/open5gs/commit/f780f9af45c27b6f49987d96ba71dedb3dd85840 - Patch
References () https://github.com/open5gs/open5gs/issues/3608 - () https://github.com/open5gs/open5gs/issues/3608 - Exploit, Issue Tracking, Vendor Advisory
CWE NVD-CWE-noinfo
First Time Open5gs open5gs
Open5gs
CPE cpe:2.3:a:open5gs:open5gs:2.7.2:*:*:*:*:*:*:*

03 Feb 2025, 20:15

Type Values Removed Values Added
New CVE

Information

Published : 2025-02-03 20:15

Updated : 2025-04-22 14:58


NVD link : CVE-2024-56921

Mitre link : CVE-2024-56921


JSON object : View

Products Affected

open5gs

  • open5gs