Description
A weakness has been identified in Open5GS up to 2.7.7. The affected element is the function smf_nudm_sdm_handle_get of the file src/smf/nudm-handler.c of the component SMF. Executing a manipulation of the argument preemptCap can lead to reachable assertion. The attack may be launched remotely. Upgrading to version 2.8.0 is sufficient to fix this issue. This patch is called 4554405f29bffd7562abedbee63484825bd90cd5. You should upgrade the affected component.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Open5GS | 2.7.0, 2.7.1, 2.7.2, 2.7.3, 2.7.4, 2.7.5, 2.7.6, 2.7.7 | 2.8.0 |
References
- VDB-397085 | Open5GS SMF nudm-handler.c smf_nudm_sdm_handle_get assertion vdb-entry technical-description
- VDB-397085 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- CVE-2026-82590 | CVE Analysis and Report third-party-advisory
- Submit #891893 | Open5gs SMF v2.7.7 Denial of Service third-party-advisory
- https://github.com/open5gs/open5gs/issues/4455 issue-tracking
- https://github.com/open5gs/open5gs/commit/4554405f29bffd7562abedbee63484825bd90cd5 patch
- https://github.com/open5gs/open5gs/releases/tag/v2.8.0 patch
- https://github.com/open5gs/open5gs/ product