CVE-2026-2517
Open5GS SMF types.c ogs_gtp2_parse_tft denial of service
Résumé
Open5GS SMF types.c ogs_gtp2_parse_tft denial of service
Description d'origine
La description telle que publiée par la source (souvent en anglais).
A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Références
- advisory github.com
- advisory nvd.nist.gov
- advisory vuldb.com
- advisory vuldb.com
- report github.com
- report github.com
- report vuldb.com
- web github.com