Threats tagged 'ghsa-c4rp-26v8-cm35'

Open5GS version 2.8.0 contains a memory exhaustion vulnerability in its HTTP/2 SBI server. An unauthenticated remote attacker can exploit repeated header names and HPACK compression to cause persistent heap growth, leading to process memory exhaustion and termination of the affected network function, resulting in denial of service.