CVE-2024-34476 | Open5GS up to 2.7.0 security.c ogs_nas_encrypt len assertion

A vulnerability was found in Open5GS up to 2.7.0. It has been declared as problematic. Affected by this vulnerability is the function ogs_nas_encrypt in the library lib/nas/common/security.c. The manipulation of the argument len leads to reachable assertion.

This vulnerability is known as CVE-2024-34476. The attack needs to be approached within the local network. There is no exploit available.

It is recommended to upgrade the affected component.