CVE-2024-14044
Deferred Deferred - Pending Action

Buffer Overflow in Open5GS Diameter Rx Handler

Publication date: 2026-08-12

Last updated on: 2026-08-12

Assigner: VulDB

Description
A vulnerability was identified in Open5GS up to 2.7.1. This issue affects the function pcrf_rx_aar_cb of the file src/pcrf/pcrf-rx-path.c of the component Diameter Rx Handler. The manipulation of the argument num_of_media_component/num_of_sub leads to buffer overflow. The attack can be initiated remotely. The exploit is publicly available and might be used. Upgrading to version 2.7.2 is capable of addressing this issue. The identifier of the patch is 87b4e4535c77ded627cdb6f4e4e2e3ea761f40b7. It is recommended to upgrade the affected component.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-08-12
Last Modified
2026-08-12
Generated
2026-09-01
AI Q&A
2026-08-12
EPSS Evaluated
2026-08-31
NVD
CVE-2024-14044
EUVD
EUVD-2024-55716

Affected Vendors & Products

Showing 2 associated CPEs
Vendor Product Version / Range
open5gs open5gs 2.7.2
open5gs open5gs to 2.7.1 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-120 The product copies an input buffer to an output buffer without verifying that the size of the input buffer is less than the size of the output buffer.
CWE-119 The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is a stack overflow in Open5GS up to version 2.7.1. It affects the Diameter Rx Handler component, specifically the function pcrf_rx_aar_cb in src/pcrf/pcrf-rx-path.c. The issue occurs when the counters num_of_media_component or num_of_sub are manipulated, leading to a buffer overflow. An attacker can remotely exploit this by sending a malformed Diameter AA-Request message.

Detection Guidance

Detecting this vulnerability requires monitoring for malformed Diameter Rx AAR messages targeting Open5GS PCRF/PCF components. Inspect network traffic for unusual Diameter protocol messages, particularly those with excessive media components or sub-components. Use Wireshark to filter Diameter Rx interface traffic and look for malformed packets. Check Open5GS logs for crashes or stack overflow errors in pcrfd or pcffd processes.

Impact Analysis

The vulnerability can lead to denial of service or arbitrary code execution. Attackers could exploit it remotely without authentication. Systems running vulnerable Open5GS versions may crash or become compromised if exposed to crafted network traffic.

Compliance Impact

The vulnerability allows remote attackers to trigger a buffer overflow via malformed Diameter Rx messages, potentially leading to arbitrary code execution or denial of service. This could compromise the integrity and availability of network services handling sensitive data. For GDPR, this may impact data security and breach notification requirements. For HIPAA, it could affect the confidentiality and integrity of protected health information if exploited in healthcare networks.

Mitigation Strategies

Immediately upgrade Open5GS to version 2.7.2 or later. Apply the patch with commit ID 87b4e4535c77ded627cdb6f4e4e2e3ea761f40b7. If immediate upgrade is not possible, restrict network access to Diameter Rx interfaces using firewalls or network segmentation. Monitor for exploitation attempts and disable Rx interface functionality if not required.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2024-14044. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart