Vulnerabilities > Open5Gs > Medium

DATE CVE VULNERABILITY TITLE RISK
2024-01-02 CVE-2023-50019 Improper Handling of Exceptional Conditions vulnerability in Open5Gs 2.6.6
An issue was discovered in open5gs v2.6.6.
network
high complexity
open5gs CWE-755
5.9
2023-10-03 CVE-2023-4885 Unspecified vulnerability in Open5Gs
Man in the Middle vulnerability, which could allow an attacker to intercept VNF (Virtual Network Function) communications resulting in the exposure of sensitive information.
network
high complexity
open5gs
5.9
2022-09-26 CVE-2022-3299 Improper Resource Shutdown or Release vulnerability in Open5Gs
A vulnerability was found in Open5GS up to 2.4.10.
network
low complexity
open5gs CWE-404
6.5
2022-04-05 CVE-2021-44108 NULL Pointer Dereference vulnerability in Open5Gs
A null pointer dereference in src/amf/namf-handler.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request to amf.
network
low complexity
open5gs CWE-476
5.0
2022-04-05 CVE-2021-44109 Out-of-bounds Write vulnerability in Open5Gs
A buffer overflow in lib/sbi/message.c in Open5GS 2.3.6 and earlier allows remote attackers to Denial of Service via a crafted sbi request.
network
low complexity
open5gs CWE-787
5.0
2022-03-29 CVE-2021-44081 Out-of-bounds Write vulnerability in Open5Gs 2.1.4
A buffer overflow vulnerability exists in the AMF of open5gs 2.1.4.
network
low complexity
open5gs CWE-787
5.0
2021-10-07 CVE-2021-41794 Classic Buffer Overflow vulnerability in Open5Gs
ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow.
network
low complexity
open5gs CWE-120
5.0