Open5GS Denial of Service Vulnerability (CNVD-2023-08775)

Open5GS is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. version v2.4.11 of Open5GS suffers from a denial of service vulnerability that stems from the failure or inability to free dynamically allocated heap memory in src/upf/pfcp-path.c. An attacker could exploit this vulnerability to cause a denial of service via a specially crafted pfcp packets to cause a denial of service.