CVE-2024-40130

open5gs v2.6.4 is vulnerable to Buffer Overflow

Critical · published July 16, 2024

CVSS v3.1
9.8
EPSS
1%
Percentile
49.9
In the wild
Unconfirmed
What it is

🔥 A buffer overflow in open5gs v2.6.4 allows attackers to take control of the system with just a few crafted inputs! Think of it like a crowded elevator that just keeps getting more packed without any checks. At some point, it’ll overflow, and who knows what chaos might ensue! An attacker can exploit this vulnerability to execute arbitrary code, potentially leading to complete system takeover or data breaches. This is absolutely devastating for anyone using this version of open5gs, as the attacker could manipulate sensitive data or disrupt services entirely!

Put simply

Think of it like a crowded elevator that just keeps getting more packed without any checks. At some point, it’ll overflow, and who knows what chaos might ensue! The buffer overflow vulnerability in open5gs occurs in the /lib/core/abts.c file, where improper handling of input allows extra data to spill over, creating opportunities for attackers to inject malicious code.

What to do

An attacker can exploit this vulnerability to execute arbitrary code, potentially leading to complete system takeover or data breaches. This is absolutely devastating for anyone using this version of open5gs, as the attacker could manipulate sensitive data or disrupt services entirely! Immediately upgrade open5gs to version 2.6.5 or later to patch this vulnerability. Additionally, review your input validation processes to ensure that similar vulnerabilities don't slip through the cracks in the future. Regular audits will help as well! You've got this! Patch up and secure your systems like a pro! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00636 · 49.9th percentile
Published
2024-07-16T00:00Z
EPSS history
Timeline
  • 16 JUL 00:00Z
    open5gs v2.6.4 is vulnerable to Buffer Overflow
    cvelistv5