Threats tagged 'ghsa-f67v-6p73-pvc5'

A denial of service vulnerability exists in Open5GS up to version 2.7.7 in the SMF component's smf_nsmf_handle_update_data_in_vsmf function. The flaw arises from manipulation of the qosFlowProfile argument. Remote exploitation is possible, and public exploit code is available. The project has been informed but has not yet responded or issued a fix.