Skip to content
OpenAdvisories
High · 7.5 CVE-2023-4883 EUVD-2023-54722GHSA-2cqc-g5jj-27mw

Multiple vulnerabilities in Open5GS

Published Oct 3, 2023 · Updated Sep 19, 2024 · Assigned by INCIBE

Description

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage.

Affected products

VendorProductAffectedFixed
Open5GS Open5GS 2.4.10 and prior —

References