O-RAN Near Realtime RIC H-Release E2 Subscription Request Flooding Denial-of-Service Vulnerability

A denial-of-service vulnerability has been identified in O-RAN Near Realtime RIC H-Release. This issue arises when an xApp floods the system with a large number of E2 Subscription Requests, causing the e2mgr component to crash.

Impact

Exploitation of this vulnerability leads to a crash of the e2mgr component, causing a denial-of-service condition where the component is no longer operational.

Reproduction

To reproduce this vulnerability, send a high volume of E2 Subscription Requests from an xApp to the Near-RT RIC component. The e2mgr will crash as a result.