CVE-2026-117067
Last modified
CVE-2026-117067 is a vulnerability of currently unknown severity. An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation..
Description
An out-of-bounds memory access vulnerability in the N2 SCTP interface of OpenAirInterface (OAI) CN5G AMF v2.2.1 allows an unauthenticated remote attacker to cause a denial of service (DoS) by repeatedly establishing SCTP associations, resulting in a process crash due to improper file descriptor bounds checking in the FD_SET() operation.
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| — | — | n/a |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-117067?
How severe is CVE-2026-117067?
How do I fix CVE-2026-117067?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-1170A vulnerability was detected in birkir prime up to 0.4.0.bet…5.5
- CVE-2026-11700Use after free in Tracing in Google Chrome prior to 149.0.78…8.3
- CVE-2026-11701Inappropriate implementation in Guest View in Google Chrome …5.4
- CVE-2026-11702Bytes::Random::Secure::Tiny versions through 1.011 for Perl …7.5
- CVE-2026-117028Skuul School Management System through version 2.6.5 is vuln…6.5
- CVE-2026-11703Missing SNI/ALPN binding on stateful (session-ID) resumption…7.5
- CVE-2026-117068An integer underflow vulnerability in the NAS decoder of Ope…
- CVE-2026-117069An integer truncation vulnerability in the NAS decoder of Op…7.5
- CVE-2026-11707IBM Tivoli System Automation Application Manager 4.1 and IBM…9.3
- CVE-2026-11708IBM WebSphere Application Server 9.0, and 8.5 is affected by…9.3
- CVE-2026-117082An authentication bypass vulnerability in the Universal Plug…
- CVE-2026-1171A flaw has been found in birkir prime up to 0.4.0.beta.0. Im…7.5
Are you affected by CVE-2026-117067?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST