Open5GS Denial of Service Vulnerability (CNVD-2023-08774)

Open5GS is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. version v2.4.11 of Open5GS suffers from a denial of service vulnerability that stems from the failure or inability to free dynamically allocated heap memory in src/smf/pfcp-path.c. An attacker...

CVE-2022-43222

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43221

open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43222

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43221

open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

CVE-2022-43221

open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

CVE-2022-43223

CVE-2022-43223 affects Open5GS v2.4.11, with a memory leak in the ngap-handler.c component that can cause a Denial of Service via a crafted UE attachment. The NVD entry cites a CVSS v3.1 base score of 7.5 (HIGH) with network access, low attack complexity, no privileges, no user interaction, and i...

Open5GS 安全漏洞

Open5GS is a C open source implementation of 5G Core and Epc, the core network of the Lte/Nr network. version v2.4.11 of Open5GS suffers from a denial of service vulnerability that stems from the failure or inability to free dynamically allocated heap memory in src/upf/pfcp-path.c. An attacker...

CVE-2022-43222

open5gs v2.4.11 was discovered to contain a memory leak in the component src/smf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted PFCP packet...

PT-2022-26799 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.4.11 Description: The issue is related to a memory leak in the component src/smf/pfcp-path.c, which allows attackers to cause a Denial of Service DoS via a crafted PFCP packet. Recommendations: For open5gs version 2.4.11,...

CVE-2022-43222

Open5GS v2.4.11 is affected by a memory leak in src/smf/pfcp-path.c that can be exploited to cause a Denial of Service via crafted PFCP packets. The CVE entry documents a HIGH severity (CVSS 3.1 v3.1: AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H). Connected sources corroborate the vulnerability in the mem...

CVE-2022-43221

CVE-2022-43221 - Normal (concrete details available) Open5GS v2.4.11 is affected due to a memory leak in the UPF path component at pfcp-path.c. The issue enables a Denial of Service via a crafted PFCP packet. Documents consistently cite the vulnerable file (src/upf/pfcp-path.c) and the resulting ...

PT-2022-26800 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.4.11 Description: The issue is related to a memory leak in the ngap-handler.c component. This allows attackers to cause a Denial of Service DoS via a crafted UE attachment. Recommendations: For open5gs version 2.4.11, consid...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...