This vulnerability exists in Open5GS, an open-source 5G core network implementation, specifically in the function ogs_sbi_discovery_option_add_service_names within the NSSF component's /lib/sbi/message.c file. Improper handling in this function allows an attacker to cause a denial of service condition remotely, potentially disrupting service availability. The vulnerability affects all versions up to and including 2.7.7. Although the exploit details have been publicly disclosed, no official remediation or patch has been released by the project as of the publication date.

Successful exploitation results in denial of service, impacting the availability of the affected Open5GS component. The attack can be performed remotely with low complexity and does not require user interaction. This could disrupt 5G core network operations relying on the vulnerable Open5GS versions. There is no evidence of privilege escalation, confidentiality, or integrity impact based on the available data.

No official patch or remediation is currently available from the vendor/project. Users should monitor the Open5GS project for updates or advisories addressing this vulnerability. Until a fix is released, consider limiting exposure of the affected service to untrusted networks and applying network-level protections to reduce the risk of exploitation.