Описание
An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRequest packet with restoration indication = true and (teid = 0 or teid >= ogs_pfcp_pdr_teid_pool.size).
Ссылки
- ExploitThird Party Advisory
- ExploitIssue Tracking
Уязвимые конфигурации
Конфигурация 1Версия до 2.7.2 (включая)
cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
EPSS
Процентиль: 19%
0.0006
Низкий
7.1 High
CVSS3
Дефекты
CWE-20
Связанные уязвимости
CVSS3: 7.1
debian
8 месяцев назад
An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker ...
CVSS3: 7.1
github
8 месяцев назад
An issue in upf in open5gs 2.7.2 and earlier allows a remote attacker to cause a Denial of Service via a crafted PFCP SessionEstablishmentRequest packet with restoration indication = true and (teid = 0 or teid >= ogs_pfcp_pdr_teid_pool.size).
EPSS
Процентиль: 19%
0.0006
Низкий
7.1 High
CVSS3
Дефекты
CWE-20