OpenAirInterface CN5G AMF Uninitialized Pointer Dereference Vulnerability in NGAP PDU Session Resource Setup Response Handling

A vulnerability allowing for a denial-of-service (DoS) condition has been identified in OpenAirInterface CN5G AMF versions through 2.0.0. The issue arises from an uninitialized pointer dereference in the ngap_handle_pdu_session_resource_setup_response function. This vulnerability can be exploited by sending a crafted PDU Session Resource Setup Response over the N2 interface, causing the AMF to crash.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the AMF to crash and disrupt cellular communications managed by the AMF.

Reproduction

To reproduce this vulnerability, send a PDU Session Resource Setup Response message with a crafted Payload that exploits the uninitialized pointer dereference. This can be done over the N2 interface, which is used for communication between the RAN and the core network in 5G.