Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-02267
HistoryNov 03, 2022 - 12:00 a.m.

Open5GS ngap-handler.c Denial of Service Vulnerability

2022-11-0300:00:00
China National Vulnerability Database
www.cnvd.org.cn
14
open5gs
denial of service
vulnerability
ngap handler.c
memory leak
ue attachment
attacker
exploit

EPSS

0.001

Percentile

36.8%

Open5GS is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version v2.4.11, which is caused by a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this vulnerability to cause a denial of service.

EPSS

0.001

Percentile

36.8%

Related for CNVD-2023-02267