CVE-2024-14042

Deferred Deferred - Pending Action

Stack-Based Buffer Overflow in Open5GS

Publication date: 2026-08-11

Last updated on: 2026-08-12

Assigner: VulDB

Description

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to initiate the attack remotely. The exploit has been made public and could be used. Upgrading to version 2.7.2 is able to mitigate this issue. The patch is named e89aa79efe629ae90f59dcdf8847c117d9a7da86. It is suggested to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-11

Last Modified

2026-08-12

Generated

2026-09-01

AI Q&A

2026-08-12

EPSS Evaluated

2026-08-30

NVD

CVE-2024-14042

EUVD

EUVD-2024-55714

Affected Vendors & Products

Vendor	Product	Version / Range
open5gs	open5gs	to 2.7.1 (inc)
open5gs	open5gs	2.7.2

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-119	The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.
CWE-121	A stack-based buffer overflow condition is a condition where the buffer being overwritten is allocated on the stack (i.e., is a local variable or, rarely, a parameter to a function).

Attack-Flow Graph

Executive Summary

This vulnerability is a stack-based buffer overflow in Open5GS up to version 2.7.1. It occurs in the Diameter S6a interface when processing certain messages. The flaw allows an attacker to manipulate the length of data copied into a fixed-size buffer, causing memory corruption. The issue affects functions handling Update-Location-Request and Authentication-Information-Request messages.

Detection Guidance

Detecting this vulnerability requires monitoring for malformed Diameter S6a protocol messages targeting the HSS component. Inspect network traffic for oversized Visited-PLMN-Id AVP values in Authentication-Information-Request or Update-Location-Request messages. Use tools like Wireshark with Diameter protocol dissectors to analyze S6a interface traffic for anomalies.

Impact Analysis

An attacker could exploit this to cause a denial of service or execute arbitrary code on the system running the vulnerable Open5GS component. This could disrupt network services or lead to unauthorized access. The attack is possible remotely if the Diameter S6a interface is exposed.

Compliance Impact

This vulnerability could potentially impact compliance with GDPR and HIPAA by enabling remote attacks that lead to stack-based buffer overflows. Exploitation may result in unauthorized access, data breaches, or service disruptions, which are critical concerns under both regulations. GDPR requires protection of personal data, while HIPAA mandates safeguards for sensitive health information. The lack of proper bounds checking in the Diameter S6a interface could allow attackers to execute arbitrary code or cause denial of service, compromising data integrity and confidentiality.

Mitigation Strategies

Upgrade Open5GS to version 2.7.2 or later to apply the patch addressing the stack overflow issue.
Apply the specific patch commit e89aa79efe629ae90f59dcdf8847c117d9a7da86 if immediate upgrade is not feasible.
Restrict network access to the S6a interface to trusted Diameter peers only to reduce attack surface.
Monitor HSS logs for crashes or memory corruption errors indicating potential exploitation attempts.

Hi! I’m here to help you understand CVE-2024-14042. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70