CVE-2026-78186: Reachable Assertion

A flaw has been found in Open5GS up to 2.8.0. This affects an unknown function of the file src/hss/hss-cx-path.c of the component HSS. This manipulation of the argument User-Name causes reachable assertion. The attack is possible to be carried out remotely. The exploit has been published and may ...

RCE (Remote Code Execution) org.bouncycastle:bcprov-lts8on Dependency in Crowd Data Center

This High severity RCE Remote Code Execution vulnerability was introduced in versions 6.1.0, 6.2.0, 6.3.0, 7.0.0, 7.1.0, and 7.2.0 of Crowd Data Center. This RCE Remote Code Execution vulnerability, with a CVSS Score of 8.7 and a CVSS Vector of...

CVE-2026-72058 net: ixp4xx_hss: fix duplicate HDLC netdev allocation

In the Linux kernel, the following vulnerability has been resolved: net: ixp4xxhss: fix duplicate HDLC netdev allocation ixp4xxhssprobe allocates two HDLC netdevs. The first one is stored in ndev, initialized, and registered with registerhdlcdevice. The second one is stored in port-netdev and lat...

PT-2026-72247

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Description An issue exists in the ixp4xx hss probe function where two HDLC netdevs are allocated instead of one. The first allocation is stored in ndev, initialized, and registered via register hdl...

CVE-2025-15686

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686 Open5GS HSS Service fd_msg_sess_get denial of service

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

EUVD-2025-210703

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686 Open5GS HSS Service fd_msg_sess_get denial of service

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686

Open5GS up to 2.7.6 is affected by a denial-of-service vulnerability in the HSS Service, specifically in the fd_msg_sess_get function where manipulating the Session-Id argument triggers a remote DoS. The exploit has been publicly disclosed. No remediation details are provided in the supplied docu...

CVE-2025-15686 Open5GS HSS Service fd_msg_sess_get denial of service

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

CVE-2025-15686: Improper Resource Shutdown or Release

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fdmsgsessget of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the public a...

PT-2026-70974

A vulnerability has been found in Open5GS up to 2.7.6. Affected by this issue is the function fd msg sess get of the component HSS Service. Such manipulation of the argument Session-Id leads to denial of service. The attack may be performed from remote. The exploit has been disclosed to the publi...

CVE-2024-14042 Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

CVE-2024-14042

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

CVE-2024-14042 Open5GS Diameter S6a hss-s6a-path.c hss_ogs_diam_s6a_ulr_cb stack-based overflow

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

CVE-2024-14042

Open5GS Diameter S6a (src/hss/hss-s6a-path.c) contains a stack-based overflow in hss_ogs_diam_s6a_air_cb/hss_ogs_diam_s6a_ulr_cb triggered by manipulating os.len. The issue is exploitable remotely and affects Open5GS up to 2.7.1. Upgrading to version 2.7.2 mitigates the vulnerability; the patch i...

CVE-2024-14042: Stack-based Buffer Overflow

A vulnerability was found in Open5GS up to 2.7.1. This affects the function hssogsdiams6aaircb/hssogsdiams6aulrcb of the file src/hss/hss-s6a-path.c of the component Diameter S6a Interface. Performing a manipulation of the argument os.len results in stack-based buffer overflow. It is possible to...

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk15on is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from ...

Memory Allocation with Excessive Size Value

Overview org.bouncycastle:bcprov-jdk14 is a Java implementation of cryptographic algorithms. Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value in HSSPublicKeyParameters.getInstance and HSSSignature.getInstance, which read the HSS level count L from an...