Open5GS ngap-handler.c Denial of Service Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2022-43223

CVE-2022-43223 affects Open5GS v2.4.11, with a memory leak in the ngap-handler.c component that can cause a Denial of Service via a crafted UE attachment. The NVD entry cites a CVSS v3.1 base score of 7.5 (HIGH) with network access, low attack complexity, no privileges, no user interaction, and i...