GCVE - cpe:2.3:a:open5gs:open5gs:2.7.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:open5gs:open5gs:2.7.0:*:*:*:*:*:*:*

part: a version: 2.7.0 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:docker/openverso/open5gs`	purl2cpe	2026-06-01 10:13:03.874838
`pkg:github/open5gs/open5gs`	purl2cpe	2026-06-01 10:13:03.874839

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-34476`	vulnerable	2026-06-08 06:37:33.367030	Details available Open5GS before 2.7.1 is vulnerable to a reachable assertion that can cause an AMF crash via NAS messages from a UE: ogs_nas_encrypt in lib/nas/common/security.c for pkbuf->len. Published: 2024-05-04T00:00:00.000Z Updated: 2024-08-02T02:51:11.588Z Open on db.gcve.eu Reference links https://github.com/open5gs/open5gs/pull/3122 https://github.com/open5gs/open5gs/compare/v2.7.0...v2.7.1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-33382`	vulnerable	2026-06-08 06:37:31.080108	Details available An issue in Open5GS v.2.7.0 allows an attacker to cause a denial of service via the 64 unsuccessful UE/gnb registration Published: 2024-05-08T00:00:00.000Z Updated: 2025-03-26T14:47:38.745Z Open on db.gcve.eu Reference links https://github.com/open5gs/open5gs/issues/2733	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-24431`	vulnerable	2026-06-08 06:29:41.409162	Details available A reachable assertion in the ogs_nas_emm_decode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet with a zero-length EMM message length. Published: 2024-11-15T00:00:00.000Z Updated: 2024-12-03T16:04:26.231Z Open on db.gcve.eu Reference links https://cellularsecurity.org/ransacked https://open5gs.org/	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.