Threats tagged 'ghsa-j2m9-hp34-9gm7'

Free5GC v4.2.3 has a resource exhaustion vulnerability during PFCP Session Establishment failure handling. If the SMF does not receive a PFCP Session Establishment Response from the UPF, UE IP address resources are not released properly. Repeated failed attempts can exhaust the UE IP address pool, causing denial of service by preventing new PDU session establishments.