5 matches found
CVE-2026-106806
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...
CVE-2026-106806
A memory exhaustion vulnerability exists in Open5GS v2.8.0 within the HTTP/2 SBI server . The issue is caused by the leakage of previously allocated header strings when repeated header names are used; HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of dupl...
CVE-2026-106806: n/a: A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...
EUVD-2026-115352
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...
CVE-2026-106806
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeat...