Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.
References
| Link | Resource |
|---|---|
| https://jira.o-ran-sc.org/browse/RIC-989 | Exploit Issue Tracking Vendor Advisory |
| https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html | |
| https://jira.o-ran-sc.org/browse/RIC-989 | Exploit Issue Tracking Vendor Advisory |
| https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html |
Configurations
History
21 Nov 2024, 08:20
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://jira.o-ran-sc.org/browse/RIC-989 - Exploit, Issue Tracking, Vendor Advisory | |
| References | () https://www.trendmicro.com/en_us/research/23/l/the-current-state-of-open-ran-security.html - |
14 Dec 2023, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
31 Aug 2023, 00:26
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.5 |
| First Time |
O-ran-sc ric Message Router
O-ran-sc |
|
| References | (MISC) https://jira.o-ran-sc.org/browse/RIC-989 - Exploit, Issue Tracking, Vendor Advisory | |
| CWE | CWE-120 | |
| CPE | cpe:2.3:a:o-ran-sc:ric_message_router:4.9.0:*:*:*:*:*:*:* |
28 Aug 2023, 22:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-08-28 22:15
Updated : 2024-11-21 08:20
NVD link : CVE-2023-40998
Mitre link : CVE-2023-40998
CVE.ORG link : CVE-2023-40998
JSON object : View
Products Affected
o-ran-sc
- ric_message_router
CWE
CWE-120
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')