Open5GS vulnerabilities

Open5GS up to version 2.7.7 has a vulnerability in the pcf_nbsf_management_handle_register function in src/pcf/nbsf-handler.c of the sm-policies Endpoint component. Input manipulation leads to denial of service. The attack is remote, and the exploit is public. The project was notified but has not responded.

Open5GS versions up to 2.7.7 contain an out-of-bounds read vulnerability in the function ogs_sbi_client_send_via_scp_or_sepp in the library lib/sbi/client.c in the NF component. An attacker can remotely manipulate data, leading to out-of-bounds read.

In Open5GS up to version 2.7.7, there is a vulnerability in the _gtpv1_u_recv_cb function of src/upf/gtp-path.c in the UPF component. Manipulation leads to resource exhaustion. The attack can be performed remotely. The project has not responded to the report.