<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: o-ran-sc</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2024-34048: O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.</title><link>https://patchthecve.com/cve/CVE-2024-34048.html</link><guid>https://patchthecve.com/cve/CVE-2024-34048.html</guid><pubDate>Wed, 17 Jun 2026 07:32:48 +0000</pubDate><description>CRITICAL 9.8: O-RAN RIC I-Release e2mgr lacks array size checks in E2nodeConfigUpdateNotificationHandler.</description></item><item><title>CVE-2024-34047: O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.</title><link>https://patchthecve.com/cve/CVE-2024-34047.html</link><guid>https://patchthecve.com/cve/CVE-2024-34047.html</guid><pubDate>Wed, 17 Jun 2026 07:32:48 +0000</pubDate><description>MEDIUM 4.3: O-RAN RIC I-Release e2mgr lacks array size checks in RicServiceUpdateHandler.</description></item><item><title>CVE-2023-42358: An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote </title><link>https://patchthecve.com/cve/CVE-2023-42358.html</link><guid>https://patchthecve.com/cve/CVE-2023-42358.html</guid><pubDate>Wed, 17 Jun 2026 06:23:45 +0000</pubDate><description>HIGH 7.7: An issue was discovered in O-RAN Software Community ric-plt-e2mgr in the G-Release environment, allows remote attackers to cause a denial of service (DoS) via a crafted request to the E2Manager API component.</description></item><item><title>CVE-2023-41628: An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incor</title><link>https://patchthecve.com/cve/CVE-2023-41628.html</link><guid>https://patchthecve.com/cve/CVE-2023-41628.html</guid><pubDate>Wed, 17 Jun 2026 06:22:30 +0000</pubDate><description>HIGH 7.5: An issue in O-RAN Software Community E2 G-Release allows attackers to cause a Denial of Service (DoS) by incorrectly initiating the messaging procedure between the E2Node and E2Term components.</description></item><item><title>CVE-2023-41627: O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives</title><link>https://patchthecve.com/cve/CVE-2023-41627.html</link><guid>https://patchthecve.com/cve/CVE-2023-41627.html</guid><pubDate>Wed, 17 Jun 2026 06:22:30 +0000</pubDate><description>HIGH 7.5: O-RAN Software Community ric-plt-lib-rmr v4.9.0 does not validate the source of the routing tables it receives, potentially allowing attackers to send forged routing tables to the device.</description></item><item><title>CVE-2023-40998: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to </title><link>https://patchthecve.com/cve/CVE-2023-40998.html</link><guid>https://patchthecve.com/cve/CVE-2023-40998.html</guid><pubDate>Wed, 17 Jun 2026 06:20:06 +0000</pubDate><description>HIGH 7.5: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via the packet size component.</description></item><item><title>CVE-2023-40997: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to </title><link>https://patchthecve.com/cve/CVE-2023-40997.html</link><guid>https://patchthecve.com/cve/CVE-2023-40997.html</guid><pubDate>Wed, 17 Jun 2026 06:20:06 +0000</pubDate><description>HIGH 7.5: Buffer Overflow vulnerability in O-RAN Software Community ric-plt-lib-rmr v.4.9.0 allows a remote attacker to cause a denial of service via a crafted packet.</description></item></channel></rss>