348 matches found
CVE-2024-51179
CVE-2024-51179 : Flooding of Crafted packets from an Attacker can crash UPF/SMF in Open5gs Vulnerability Description Description: An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of servie via the Network Function Virtualizations NFVs such as the User Plane Function UPF and...
CVE-2026-106805
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-106807
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...
EUVD-2026-115347
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...
PT-2026-135503
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogs pfcp xact remote create returns NULL, but the failure is not handled properly and leads to an ogs assertnew failure in ogs pfcp xact...
CVE-2026-106805
A resource exhaustion vulnerability exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. The root cause is that the SMF fails to properly release allocated UE IP address resources when a PFCP Session Establishment Response is not received from the UPF . This allows an atta...
CVE-2026-106805: n/a: A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-106807: n/a: A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...
PT-2026-135533
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-106807
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...
CVE-2026-106807
A denial-of-service vulnerability exists in open5GS v2.8.0 within the PFCP transaction handling path . The root cause is improper error handling in ogs_pfcp_xact_remote_create() ; when the PFCP transaction or timer resource pool is exhausted, the function returns NULL, triggering an ogs_assert(ne...
EUVD-2026-115346
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-106807
A denial-of-service vulnerability exists in open5GS v2.8.0 in the PFCP transaction handling path. When the PFCP transaction or timer resource pool is exhausted, ogspfcpxactremotecreate returns NULL, but the failure is not handled properly and leads to an ogsassertnew failure in ogspfcpxactreceive...
CVE-2026-106805
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-106805
A resource exhaustion issue exists in Free5GC v4.2.3 during PFCP Session Establishment failure handling. When the SMF does not receive a PFCP Session Establishment Response from the UPF, allocated UE IP address resources are not properly released. Repeated failed session establishment attempts ca...
CVE-2026-98952
A flaw was found in the Linux kernel's Packet Forwarding Control Protocol PFCP component. A remote attacker can exploit this vulnerability by sending a truncated or fragmented PFCP packet with the session flag enabled, causing the kernel to read memory beyond the end of the packet buffer. This...
SUSE CVE-2026-98952
In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the UDP header and the 4 byte PFCP header are in the linear area. When the S flag is set, pfcpsessionrecv then reads the 8 byte SEID that...
Linux Distros Unpatched Vulnerability : CVE-2026-98952
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the...
CVE-2026-98952
In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the UDP header and the 4 byte PFCP header are in the linear area. When the S flag is set, pfcpsessionrecv then reads the 8 byte SEID that...
DEBIAN-CVE-2026-98952
In the Linux kernel, the following vulnerability has been resolved: pfcp: make sure the SEID is linear before reading it pfcpencaprecv only makes sure that the UDP header and the 4 byte PFCP header are in the linear area. When the S flag is set, pfcpsessionrecv then reads the 8 byte SEID that...