CVE-2025-44952
A missing length check in `ogs_pfcp_subnet_add` function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local atta...
Original description
The description as published by the source.
A missing length check in ogs_pfcp_subnet_add function from PFCP library, used by both smf and upf in open5gs 2.7.2 and earlier, allows a local attacker to cause a Buffer Overflow by changing the session.dnn field with a value with length greater than 101.
References
- advisory github.com
- advisory nvd.nist.gov
- report github.com
- web gist.github.com
- web gist.github.com