PT-2026-68078

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description The gtp1u send echo resp function fails to check the return value of skb pull data. When processing an echo request between 16 and 19 bytes, the pull request for 20 bytes fails and retur...

CVE-2026-8187 Open5GS UPF gtp-path.c _gtpv1_u_recv_cb resource consumption

A flaw has been found in Open5GS up to 2.7.7. This impacts the function gtpv1urecvcb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. The project was informed of the problem early through an...

EUVD-2026-28911

A flaw has been found in Open5GS up to 2.7.7. This impacts the function gtpv1urecvcb of the file src/upf/gtp-path.c of the component UPF. Executing a manipulation can lead to resource consumption. The attack may be performed from remote. The project was informed of the problem early through an...

Open5GS 资源管理错误漏洞

Open5GS is an open-source implementation of 5G Core and EPC in C language, which serves as the core network for LTE/NR networks. Versions of Open5GS 2.7.7 and earlier contain a resource management vulnerability. This vulnerability stems from operations performed by the gtpv1urecvcb function in th...

EUVD-2016-2535

Malware in sbrugna...

zeek -- Various vulnerabilities

Jon Siwek of Corelight reports: This release fixes the following security issue: The AYIYA and GTPv1 parsing/decapsulation logic may leak memory -- These leaks have potential for remote exploitation to cause Denial of Service via resource exhaustion...

CVE-2016-1436

The General Packet Radio Switching Tunneling Protocol 1 aka GTPv1 implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service Session Manager process restart via a crafted GTPv1 packet, aka Bug ID CSCuz46198...

Code injection

The General Packet Radio Switching Tunneling Protocol 1 aka GTPv1 implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service Session Manager process restart via a crafted GTPv1 packet, aka Bug ID CSCuz46198...

CVE-2016-1436

CVE-2016-1436 affects Cisco ASR 5000 Series Packet Data Network Gateway devices. The vulnerability arises from the General Packet Radio Switching Tunneling Protocol Version 1 (GTPv1) implementation, due to improper input validation of GTPv1 headers. A crafted GTPv1 packet can cause the Session Ma...

CVE-2016-1436

The General Packet Radio Switching Tunneling Protocol 1 aka GTPv1 implementation on Cisco ASR 5000 Packet Data Network Gateway devices before 19.4 allows remote attackers to cause a denial of service Session Manager process restart via a crafted GTPv1 packet, aka Bug ID CSCuz46198...

Cisco ASR 5000 Series Packet Data Network Gateway Denial of Service Vulnerability

A vulnerability in the implementation of General Packet Radio Switching Tunneling Protocol Version 1 GTPv1 in Cisco ASR 5000 Series Packet Data Network Gateways could allow an unauthenticated, remote attacker to cause a denial of service DoS condition due to an unexpected restart of the Session...