Description (CNA)
A vulnerability was identified in Open5GS up to 2.7.5. This vulnerability affects the function sgwc_bearer_add of the file src/sgwc/context.c. The manipulation leads to reachable assertion. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The issue report is flagged as already-fixed.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / Open5GS | affected 2.7.0; affected 2.7.1; affected 2.7.2; affected 2.7.3; affected 2.7.4; affected 2.7.5 |
CWE
CWE-617
References
- https://vuldb.com/?id.341598
- https://vuldb.com/?ctiid.341598
- https://vuldb.com/?submit.729339
- https://github.com/open5gs/open5gs/issues/4233
- https://github.com/open5gs/open5gs/issues/4233#issue-3776216182
- https://github.com/open5gs/open5gs/
ADP enrichment
No English description supplied.
No references supplied.