open5gs Vulnerability Advisory Catalog

Total 154 security vulnerabilities recorded for open5gs software and firmware.

← Back to All Vendors
Component: open5gs

An issue was discovered in Open5gs v2.7.2. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handlin...

📅 2025-02-03
CVSS 7.5 Dossier →
Component: open5gs

An issue in Open5GS v.2.7.2 allows a remote attacker to cause a denial of service via the ogs_dbi_auth_info function in lib/dbi/subscription.c file....

📅 2025-01-28
CVSS 7.5 Dossier →
Component: open5gs

A reachable assertion in the nas_eps_send_emm_to_esm function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NG...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker m...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

A reachable assertion in the ogs_kdf_hash_mme function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS packe...

📅 2025-01-22
CVSS 5.3 Dossier →
Component: open5gs

A reachable assertion in the mme_ue_find_by_imsi function of Open5GS <= 2.6.4 allows attackers to cause a Denial of Service (DoS) via a crafted NAS pa...

📅 2025-01-22
CVSS 7.5 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `Uplink NAS Transport` packet handler. A packet missing its `MME_UE_S1AP_ID` field ...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain a reachable assertion in the `UE Context Release Request` packet handler. A packet containing an invalid `MME_UE...

📅 2025-01-22
CVSS 7.5 Dossier →
Component: open5gs

Open5GS MME version <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker m...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker m...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker m...

📅 2025-01-22
CVSS 8.6 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker m...

📅 2025-01-22
CVSS 7.5 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contains an assertion that can be remotely triggered via a sufficiently large ASN.1 packet over the S1AP interface. An a...

📅 2025-01-22
CVSS 7.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 5.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 6.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 6.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 6.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain a buffer overflow in the ASN.1 deserialization function of the S1AP handler. This buffer overflow causes type co...

📅 2025-01-22
CVSS 5.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 5.3 Dossier →
Component: open5gs

Open5GS MME versions <= 2.6.4 contain an assertion that can be remotely triggered via a malformed ASN.1 packet over the S1AP interface. An attacker ma...

📅 2025-01-22
CVSS 5.3 Dossier →
Page 5 of 7 (154 Total Records)