Description
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Open5GS | 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5 | — |
References
- VDB-341598 | Open5GS context.c sgwc_bearer_add assertion vdb-entry technical-description
- VDB-341598 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #729339 | Open5GS SGWC v2.7.6 Denial of Service third-party-advisory
- https://github.com/open5gs/open5gs/issues/4233 issue-tracking
- https://github.com/open5gs/open5gs/issues/4233#issue-3776216182 exploit issue-tracking
- https://github.com/open5gs/open5gs/ product