CVE-2024-34046CWE-770denial-of-service

CVE-2024-34046

High · published April 30, 2024

CVSS v3.1
7.5
EPSS
1%
Percentile
43.3
In the wild
Unconfirmed
What it is

The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][ProcedureCode_id_RICsubscription]->Increment().

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00519 · 43.3th percentile
Weakness
CWE-770 · Allocation of Resources Without Limits or Throttling
Published
2024-04-30T04:15Z
References (2)
https://jira.o-ran-sc.org/browse/RIC-1047 · [email protected]https://jira.o-ran-sc.org/browse/RIC-1047 · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 29 APR 00:00Z
    The O-RAN E2T I-Release Prometheus metric Increment function can crash in sctpThread.cpp for message.peerInfo->sctpParams->e2tCounters[IN_SUCC][MSG_COUNTER][Pro…
    cvelistv5