In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.
High CVSS 8.6
Summary
In Open5GS through version 2.7.7 a pre-authentication heap out-of-bounds read in the AMF NAS 5GS mobile-identity handler may result in subscriber-wide denial of service.
In-depth triage · Auto channel
No in-depth report has been generated yet (DR-003 v2 AI pipeline is under construction).
Sources
- NVD DATABASE
Original Links
- https://github.com/open5gs/open5gs/security/advisories/GHSA-f4mx-3x6p-cfwp
- https://github.com/open5gs/open5gs/security/advisories/GHSA-f4mx-3x6p-cfwp
Timeline
- nvd_ingest NVD