CVE-2026-117067

Out-of-Bounds Memory Access in OpenAirInterface CN5G AMF N2 SCTP Interface Enables DoS

View on CVE.org
Published Nov 2, 2026 CVSS n/a EPSS < 1% KEV · Not listed
Description
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Openairinterface
Openairinterface oai-cn5g-amf
Vendors & Products Openairinterface
Openairinterface oai-cn5g-amf
Type Values Removed Values Added
Title Out-of-Bounds Memory Access in OpenAirInterface CN5G AMF N2 SCTP Interface Enables DoS
Weaknesses CWE-119
CWE-787
Type Values Removed Values Added
Description An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.
References
Weaknesses

Sources

Status
PUBLISHED
Assigner
mitre
Published
Updated
Nov 2, 2026, 5:28 PM
Reserved
Oct 27, 2026, 12:00 AM

View source JSON

No data.

Status
Deferred
Published
Nov 2, 2026, 6:18 PM
Modified
Nov 2, 2026, 7:35 PM

View source JSON

No data.

Updated
Nov 2, 2026, 7:15 PM

JSON