CVE-2026-117067 Details
Description
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.
A denial-of-service vulnerability has been identified in OpenAirInterface (OAI) CN5G AMF version 2.2.1. The issue arises from an out-of-bounds memory access in the N2 SCTP interface, caused by inadequate file descriptor bounds checking. This vulnerability allows an unauthenticated remote attacker to repeatedly establish SCTP associations, leading to a process crash. The exploitation occurs when the accumulated file descriptor values exceed the valid limits, causing the AMF process to terminate and disrupting the N2 control-plane interface.
Users can update to the latest version of OpenAirInterface CN5G AMF, where this vulnerability has been addressed.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Nov 2, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://gist.github.com/hackeryounow/87ecc801e93860fb41a220090f99f4d7 | [email protected] | Technical Description |
| https://github.com/openairinterface/oai-cn5g-amf/issues/14 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
Weakness Enumeration
No weakness enumeration is available for this CVE.
Affected Products
| Product | Versions |
|---|---|
| OpenAirInterface Core Network | v2.2.1 (semver) |
CPE
Remediation
| |
Change History
1 change record found show changes
| Date | Action | Recorded By |
|---|---|---|
| Nov 2, 2026 | New CVE Received | [email protected] |