Openairinterface

Openairinterface

4 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2026-30080

Exploit
  • EPSS 0.02%
  • Veröffentlicht 08.04.2026 00:00:00
  • Zuletzt bearbeitet 14.04.2026 15:47:10

OpenAirInterface v2.2.0 accepts Security Mode Complete without any integrity protection. Configuration has supported integrity NIA1 and NIA2. But if an UE sends initial registration request with only security capability IA0, OpenAirInterface accepts ...

7.5

CVE-2026-30075

Exploit
  • EPSS 0.03%
  • Veröffentlicht 08.04.2026 00:00:00
  • Zuletzt bearbeitet 14.04.2026 15:47:23

OpenAirInterface Version 2.2.0 has a Buffer Overflow vulnerability in processing UplinkNASTransport containing Authentication Response containing a NAS PDU with oversize response (For example 100 byte). The response is decoded by AMF and passed to th...

9.8

CVE-2026-30079

Exploit
  • EPSS 0.02%
  • Veröffentlicht 07.04.2026 00:00:00
  • Zuletzt bearbeitet 14.04.2026 15:45:37

In OpenAirInterface V2.2.0 AMF, Out of sequence messages causes incorrect state transition during UE registration procedure. This allows authentication to be bypassed completely. If a SecurityModeComplete message is sent after InitialUERegistration, ...

7.5

CVE-2026-30077

  • EPSS 0.07%
  • Veröffentlicht 30.03.2026 00:00:00
  • Zuletzt bearbeitet 06.04.2026 15:59:48

OpenAirInterface V2.2.0 AMF crashes when it fails to decode the message. Not all decode failures result in a crash. But the crash is consistent for particular inputs. An example input in hex stream is 80 00 00 0E 00 00 01 00 0F 80 02 02 40 00 58 00 0...