O-RAN Near Realtime RIC I-Release Connection Disruption Vulnerability

A resource exhaustion vulnerability has been identified in O-RAN Near Realtime RIC I-Release. This issue arises when an attacker floods the system with a high volume of subscription requests from an xApp, disrupting the initial connection between a gNB and the Near RT-RIC.

Impact

Exploitation of this vulnerability leads to a denial-of-service condition, causing the e2mgr component to crash.

Reproduction

To reproduce this vulnerability, send a large number of E2 Subscription Requests from an xApp to the Near RT-RIC component. This influx of requests will disrupt the connection process between the gNB and the RIC.