CVE-2024-40129

Open5GS v2.6.4 is vulnerable to Buffer Overflow

High · published July 16, 2024

CVSS v3.1
8.6
EPSS
0%
Percentile
38.6
In the wild
Unconfirmed
What it is

⚡ A buffer overflow lurking in Open5GS v2.6.4 could lead to unexpected chaos! It’s like having a coffee pot that overflows every time someone tries to brew a cup. ☕️💥 Think of this vulnerability as a crowded elevator that's been overstuffed. When one more person squeezes in, the whole thing can malfunction—risking everyone’s safety! An attacker could exploit this vulnerability to overwrite memory, potentially crashing the service or even running their own malicious code. This means they could take control, wreaking havoc on the system and compromising sensitive information!

Put simply

Think of this vulnerability as a crowded elevator that's been overstuffed. When one more person squeezes in, the whole thing can malfunction—risking everyone’s safety! This buffer overflow vulnerability is caused by improper handling of data in the pfcp/context.c file, allowing attackers to manipulate memory allocation and execute arbitrary code.

What to do

An attacker could exploit this vulnerability to overwrite memory, potentially crashing the service or even running their own malicious code. This means they could take control, wreaking havoc on the system and compromising sensitive information! To mitigate this risk, update Open5GS to the latest version immediately. Review and revise any custom code to ensure proper memory management practices are implemented. Don’t forget to run tests to confirm the fix! 🛡️ You’ve got this! With these steps, you'll strengthen your defenses and keep your systems safe! 🔒

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:H
CVSS v4.0
Not supplied
EPSS
0.00456 · 38.6th percentile
Published
2024-07-16T00:00Z
EPSS history
Timeline
  • 16 JUL 00:00Z
    Open5GS v2.6.4 is vulnerable to Buffer Overflow
    cvelistv5