Open5GS Denial of Service Vulnerability (CNVD-2023-96086)

2023-10-1100:00:00

China National Vulnerability Database

www.cnvd.org.cn

open5gs

denial of service

vulnerability

invalid pointer release

service interruption

exploitation

5g core

lte/nr network

AI Score

6.6

Confidence

High

EPSS

0.001

Percentile

23.6%

JSON

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS version 2.4.10 and earlier due to an invalid pointer release flaw in the ogs_sbi_message_free function, which can be exploited by an attacker to cause a service interruption.