Cyber Resilience

CVE-2024-24451

High

Published: 21 January 2025

Published
21 January 2025
Modified
15 April 2026
KEV Added
—
Patch
—
CVSS Score v3.1 7.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS Score 0.0188 83.6th percentile
Risk Priority 16 60% EPSS · 20% KEV · 20% CVSS

Summary

CVE-2024-24451 is a high-severity Classic Buffer Overflow (CWE-120) vulnerability in Cellularsecurity (inferred from references). Its CVSS base score is 7.5 (High).

Operationally, exploitation aligns with the MITRE ATT&CK technique Application or System Exploitation (T1499.004); ranked in the top 16.4% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog.

The strongest mitigations our analysis identified are NIST 800-53 SC-5 (Denial-of-service Protection) and SI-16 (Memory Protection).

Deeper analysis

CVE-2024-24451 is a stack overflow vulnerability (CWE-120) in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to version v2.0.0. Published on 2025-01-21, it carries a CVSS v3.1 base score of 7.5 (AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H), indicating high-impact availability disruption with network accessibility and low attack complexity.

Unauthenticated attackers can exploit the vulnerability remotely by repeatedly establishing SCTP connections to the N2 interface, triggering the stack overflow and causing a Denial of Service (DoS) that crashes the affected component.

Mitigation details are available in advisories from OpenAirInterface at http://openairinterface.com and the Cellular Security Research Group at https://cellularsecurity.org/ransacked.

EU & UK References

Vulnerability details

A stack overflow in the sctp_server::sctp_receiver_thread component of OpenAirInterface CN5G AMF (oai-cn5g-amf) up to v2.0.0 allows attackers to cause a Denial of Service (DoS) by repeatedly establishing SCTP connections with the N2 interface.

CWE(s)
CWE-120

Related Threats

MITRE ATT&CK Enterprise TechniquesAI

T1499.004 Application or System Exploitation Impact
Adversaries may exploit software vulnerabilities that can cause an application or system to crash and deny availability to users.
attack.mitre.org →
Why these techniques?

Stack overflow in network-facing SCTP handler directly enables remote application/system crash for DoS via exploitation (T1499.004).

Confidence: HIGH · MITRE ATT&CK Enterprise v18.1

CVEs Like This One

CVE-2025-20115Shared CWE-120
CVE-2020-37205Shared CWE-120
CVE-2026-28875Shared CWE-120
CVE-2020-37194Shared CWE-120
CVE-2020-37180Shared CWE-120
CVE-2024-24419Shared CWE-120
CVE-2019-25353Shared CWE-120
CVE-2026-30075Shared CWE-120
CVE-2020-37213Shared CWE-120
CVE-2021-47798Shared CWE-120

Affected Assets

Cellularsecurity
—
inferred from references and description; NVD did not file a CPE for this CVE

Mitigating Controls

Mitigating Controls (NIST 800-53 r5) AI

SI-2 Flaw Remediation good match
prevent

Directly remediates the stack overflow vulnerability in oai-cn5g-amf by identifying, testing, and installing patches from OpenAirInterface advisories.

SC-5 Denial-of-service Protection good match
prevent

Implements denial-of-service protections such as rate limiting and traffic filtering to block repeated SCTP connection attempts to the N2 interface.

SI-16 Memory Protection good match
prevent

Provides memory protection mechanisms like stack guards and address space layout randomization to prevent exploitation of the stack overflow in sctp_receiver_thread.

References