Threats tagged 'ghsa-r5pf-5mf2-ww5v'

A denial of service vulnerability exists in Open5GS up to version 2.7.7 in the UDR component's ogs_dbi_subscription_data function. The flaw is triggered by manipulation of the supi_id argument and can be exploited remotely. Public exploit code has been disclosed. No patch or vendor response has been reported yet.