An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.

Project Subscriptions

Vendors Products
Openairinterface Subscribe
Oai-cn5g-amf Subscribe
Advisories

No advisories yet.

Fixes

Solution

No solution given by the vendor.


Workaround

No workaround given by the vendor.

History

Mon, 02 Nov 2026 19:30:00 +0000

Type Values Removed Values Added
First Time appeared Openairinterface
Openairinterface oai-cn5g-amf
Vendors & Products Openairinterface
Openairinterface oai-cn5g-amf

Mon, 02 Nov 2026 18:45:00 +0000

Type Values Removed Values Added
Title Out-of-Bounds Memory Access in OpenAirInterface CN5G AMF N2 SCTP Interface Enables DoS
Weaknesses CWE-119
CWE-787

Mon, 02 Nov 2026 17:45:00 +0000

Type Values Removed Values Added
Description An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.
References

Projects

Sign in to view the affected projects.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2026-11-02T17:28:31.881Z

Reserved: 2026-10-27T00:00:00.000Z

Link: CVE-2026-117067

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2026-11-02T18:18:43.777

Modified: 2026-11-02T19:35:33.347

Link: CVE-2026-117067

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-11-02T19:15:16Z

Weaknesses