Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-7679-g48g-fxpc

Опубликовано: 04 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 6.9
CVSS3: 7.3

Описание

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

EPSS

Процентиль: 18%
0.00058
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.3
nvd
3 дня назад

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.

CVSS3: 7.3
debian
3 дня назад

A security flaw has been discovered in Open5GS up to 2.7.6. Affected b ...

EPSS

Процентиль: 18%
0.00058
Низкий

6.9 Medium

CVSS4

7.3 High

CVSS3

Дефекты

CWE-119