High · published October 27, 2025
🚨 A single invalid request is enough to bring Open5GS to its knees! This reachable assertion vulnerability allows attackers to crash the discovery service and leave it unresponsive. ⚡ Think of it like a restaurant where a diner places an order for a dish that doesn't exist. The chef gets so confused trying to prepare it that the whole kitchen shuts down instead, leaving everyone waiting for their meals! If an attacker manages to exploit this vulnerability, they can cause a denial of service that halts the discovery service. This means that legitimate users won't be able to interact with the service, leading to frustration and potential data access issues. Imagine the chaos in a busy restaurant when the kitchen goes silent!
Think of it like a restaurant where a diner places an order for a dish that doesn't exist. The chef gets so confused trying to prepare it that the whole kitchen shuts down instead, leaving everyone waiting for their meals! The vulnerability is in Open5GS versions up to 2.7.6. By sending a creation request for a network function (NF) of an invalid type via the Service-Based Interface (SBI), attackers can trigger a process crash in the Network Repository Function (NRF), making the service unresponsive.
If an attacker manages to exploit this vulnerability, they can cause a denial of service that halts the discovery service. This means that legitimate users won't be able to interact with the service, leading to frustration and potential data access issues. Imagine the chaos in a busy restaurant when the kitchen goes silent! To protect yourself, upgrade Open5GS to version 2.7.7 or later immediately. Regularly audit your configurations and ensure only trusted connections have access to the NRF. This is essential to maintaining your service availability! You've got this! By taking these steps, you'll keep your system safe and sound. 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| open5gs/open5gs | < 2.7.5 | 2.7.5 |