236 matches found
Input validation
Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...
CVE-2023-23846
Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...
CVE-2023-23846
Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol GPTv1-U messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process...
CVE-2023-23846
Open5GS GTP library (Open5GS) shows a denial-of-service flaw due to insufficient length validation when parsing extension headers in GPTv1-U messages. In affected releases, specifically Open5GS GTP library versions prior to 2.4.13 and prior to 2.5.7, any GPT payload with an extension header lengt...
PT-2023-1375 · Open5Gs · Open5Gs Gtp
Name of the Vulnerable Software and Affected Versions: Open5GS GTP versions prior to 2.4.13 Open5GS GTP versions prior to 2.5.7 Description: The issue is related to insufficient length validation in the Open5GS GTP library, which can cause an infinite loop when parsing extension headers in GPRS...
CVE-2022-22235
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based, attacker to cause Denial of Service DoS. A PFE crash will happen when a GPRS Tunnel Protocol GTP packet is...
Design/Logic Flaw
An Improper Check for Unusual or Exceptional Conditions vulnerability in the Packet Forwarding Engine PFE of Juniper Networks Junos OS on SRX Series allows an unauthenticated, network-based, attacker to cause Denial of Service DoS. A PFE crash will happen when a GPRS Tunnel Protocol GTP packet is...
CVE-2022-22235
CVE-2022-22235 affects Juniper Networks Junos OS on SRX Series. The issue is an improper check in the Packet Forwarding Engine (PFE) that can cause a Denial of Service (PFE crash) when a GTP-encapsulated GPRS traffic packet with a malformed IP header field is processed. The crash occurs only if e...
CVE-2021-23048
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol GTP iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the...
Design/Logic Flaw
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol GTP iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the...
CVE-2021-23048
On BIG-IP version 16.0.x before 16.0.1.2, 15.1.x before 15.1.3.1, 14.1.x before 14.1.4.3, 13.1.x before 13.1.4.1, and all versions of 12.1.x and 11.6.x, when GPRS Tunneling Protocol GTP iRules commands or a GTP profile is configured on a virtual server, undisclosed GTP messages can cause the...
CVE-2021-23048
CVE-2021-23048 is a TMM GTP vulnerability in BIG-IP. When a GTP iRules command or GTP profile is configured on a virtual server, undisclosed GTP messages can cause TMM to terminate, potentially causing DoS by restarting the TMM. Connected advisories confirm affected product/version ranges and exp...
F5 BIG IP TMM GTP Denial of Service Vulnerability
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG IP TMM GTP denial of service vulnerability, where an undisclosed GTP message is associated with a GTP irule or GTP...
F5 BIG-IP输入验证错误漏洞
F5 BIG-IP is an application delivery platform from F5 that integrates network traffic orchestration, load balancing, intelligent DNS, remote access policy management, etc. The F5 BIG IP TMM GTP denial of service vulnerability, where an undisclosed GTP message is associated with a GTP irule or GTP...
GTP Echo Scanner
This module sends UDP GTP GTP-U echo requests to the target RHOSTS and reports on which ones respond, thus identifying General Packet Radio Service GPRS servers. This module does not support scanning with SCTP. This module requires Metasploit: https://metasploit.com/download Current source:...
CVE-2018-19939
The Goodix GT9xx touchscreen driver for custom Linux kernels on Xiaomi daisy-o-oss and daisy-p-oss as used in Mi A2 Lite and RedMi6 pro devices through 2018-08-27 has a NULL pointer dereference in kfree after a kmalloc failure in gtpreadColor in drivers/input/touchscreen/gt917d/gt9xx.c...
SigPloit - Telecom Signaling Exploitation Framework - SS7, GTP, Diameter & SIP
SiGploit a signaling security testing framework dedicated to Telecom Security professionals and reasearchers to pentest and exploit vulnerabilites in the signaling protocols used in mobile operators regardless of the geneartion being in use. SiGploit aims to cover all used protocols used in the...
The vulnerability of the Wireshark Network Protocol Analyzer software allows a remote attacker to compromise the accessibility of protected information.
The vulnerability exists in the APN decoding function in the GTP and GSM Management dissectors in Wireshark, due to incomplete initialization of buffers. Exploiting this vulnerability allows malicious actors to trigger a service failure abrupt termination of an application’s operation using a...
Cisco ASR 5000 Router GTPv2 Input Authentication Denial of Service Vulnerability
The Cisco ASR 5000 Series is a carrier-class platform for deploying high-demand 3G networks and migrating to Long Term Evolution LTE. A security vulnerability in the Cisco ASR 5000 Router allows a remote attacker to submit a special GTPv2 message to trigger an input validation error on the target...
