High · published December 19, 2025
⚡ A missing NodeID is the culprit here! A simple PFCP Association Setup Request can turn into a denial-of-service avalanche for the UPF, leading to chaos on your user-plane services! 🔥 Think of the UPF as a restaurant that can't serve customers because it refuses to take orders without specific details. If a server sends a request without the essential dish name (NodeID), instead of politely asking for clarification, the chef (UPF process) throws a tantrum and closes the kitchen until further notice! An attacker could exploit this flaw by repeatedly sending malformed requests, crashing the UPF each time. This means users could experience service interruptions, losing connectivity and access to vital network resources — absolutely devastating for any operation relying on stable user-plane services!
Think of the UPF as a restaurant that can't serve customers because it refuses to take orders without specific details. If a server sends a request without the essential dish name (NodeID), instead of politely asking for clarification, the chef (UPF process) throws a tantrum and closes the kitchen until further notice! This vulnerability stems from the UPF failing to validate incoming PFCP Association Setup Requests lacking the mandatory NodeID Information Element. Instead of handling the situation gracefully, it dereferences a nil pointer, causing a panic that terminates the UPF process.
An attacker could exploit this flaw by repeatedly sending malformed requests, crashing the UPF each time. This means users could experience service interruptions, losing connectivity and access to vital network resources — absolutely devastating for any operation relying on stable user-plane services! Update to version 2.1.4 or later of the omec-project to patch this vulnerability. Additionally, implementing input validation checks on incoming requests will help prevent such crashes in the future. Don't wait; secure your user-plane services now! You've got this! Tackle this vulnerability head-on, and your network will be safer and more reliable in no time! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| opennetworking/upf | ≤ 2.1.2 | — |