Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-rpcc-624p-hfv6

Опубликовано: 15 фев. 2026
Источник: github
Github: Не прошло ревью
CVSS4: 5.5
CVSS3: 5.3

Описание

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

EPSS

Процентиль: 23%
0.00076
Низкий

5.5 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-404

Связанные уязвимости

CVSS3: 5.3
nvd
около 2 месяцев назад

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

CVSS3: 5.3
debian
около 2 месяцев назад

A security flaw has been discovered in Open5GS up to 2.7.6. This vulne ...

CVSS3: 7.5
fstec
3 месяца назад

Уязвимость функции ogs_gtp2_parse_tft компонента SMF средства создания и управления мобильной сетью NR/LTE Open5GS, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 23%
0.00076
Низкий

5.5 Medium

CVSS4

5.3 Medium

CVSS3

Дефекты

CWE-404