High · published December 19, 2025
⚡ A crafty crafted header is all it takes to trigger a denial of service in free5GC 4.1.0! This vulnerability has a sneaky side, allowing attackers to disrupt your networks with a mere PFCP Session Modification Request. 😱 Think of it like a restaurant where a diner can tamper with the order slip and cause the kitchen to serve up a series of wrong dishes, leaving everyone hungry and frustrated. In this case, the Local SEID header is the ticket that’s being altered, leading to a chaotic situation. Attackers can exploit this vulnerability to send specific requests that might cause the service to crash or become unresponsive. This could result in downtime for your network, making it harder for users to connect, and potentially leading to a loss of trust in your system. That's absolutely devastating for any organization that relies on smooth communications!
Think of it like a restaurant where a diner can tamper with the order slip and cause the kitchen to serve up a series of wrong dishes, leaving everyone hungry and frustrated. In this case, the Local SEID header is the ticket that’s being altered, leading to a chaotic situation. This vulnerability occurs in the LocalNode.Sess function in free5GC 4.1.0, where crafted Local SEID headers in PFCP Session Modification Requests can lead to a denial of service or other unspecified impacts.
Attackers can exploit this vulnerability to send specific requests that might cause the service to crash or become unresponsive. This could result in downtime for your network, making it harder for users to connect, and potentially leading to a loss of trust in your system. That's absolutely devastating for any organization that relies on smooth communications! To safeguard your systems, upgrade free5GC to a patched version as soon as it becomes available. Regularly audit your configurations to ensure no unexpected headers are processed and consider implementing rate limiting on session modification requests. 🛡️ You've got this! With a quick update and some careful checks, you'll strengthen your defenses in no time! 🔒
| Product | Versions | Fixed in |
|---|---|---|
| free5gc/free5gc | all versions | — |