CVE-2024-34035

Summary

An issue was discovered in O-RAN Near Realtime RIC H-Release. To trigger the crashing of the e2mgr, an adversary must flood the system with a significant quantity of E2 Subscription Requests originating from an xApp.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://jira.o-ran-sc.org/browse/RIC-1056
• https://gist.github.com/fklement/3a43dbb9fb361dddd8db7703080ade0f

• ←Previous
• Next→