A vulnerability was determined in Open5GS up to 2.7.7
The Open5GS application has a resource consumption vulnerability in its nf-instances Endpoint, allowing an attacker to consume system resources. This issue can be exploited remotely and a public exploit is available. Developers should prioritize fixing this issue to prevent resource exhaustion.
A vulnerability was determined in Open5GS up to 2.7.7. This affects the function handle_amf_info in the library /lib/sbi/nnrf-handler.c of the component nf-instances Endpoint. Executing a manipulation of the argument nf_info_pool can lead to resource consumption. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Applying a patch is advised to resolve this issue. The issue report is flagged as already-fixed.
Developers using Open5GS are at risk of resource consumption attacks, which is a medium severity risk.
Monitor & Review
Low severity — keep this CVE on your radar and patch during routine maintenance.
What should I do?
Published
CVE disclosed publicly
Last Modified
Most recent update
Indexed to CVEInsight
Added to this platform
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
0
Affected Products
5
References
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Exploitability
Impact