High · published December 19, 2025
🚨 A sneaky denial-of-service vulnerability lurks in the omec-project UPF that can lead to repeated crashes with just a malformed request! ⚡ Think of this like a restaurant where a waiter keeps bringing back orders with missing or incorrect details — the kitchen gets overwhelmed and can't serve anyone because of the chaos. When an attacker sends a PFCP Session Establishment Request containing an empty or truncated IPv4 address, it causes the UPF to panic, crashing the service it should provide. When exploited, this vulnerability can lead to a complete shutdown of user-plane services, leaving legitimate users unable to access necessary data. This disruption could be absolutely devastating for users depending on stable network services, causing widespread frustration and potential financial losses.
Think of this like a restaurant where a waiter keeps bringing back orders with missing or incorrect details — the kitchen gets overwhelmed and can't serve anyone because of the chaos. When an attacker sends a PFCP Session Establishment Request containing an empty or truncated IPv4 address, it causes the UPF to panic, crashing the service it should provide. The issue lies in the pfcpiface component of the omec-project UPF, where the parseFAR() function fails to validate IPv4 addresses correctly. This oversight allows an attacker to trigger an out-of-bounds read, ultimately crashing the UPF during the PFCP session establishment process.
When exploited, this vulnerability can lead to a complete shutdown of user-plane services, leaving legitimate users unable to access necessary data. This disruption could be absolutely devastating for users depending on stable network services, causing widespread frustration and potential financial losses. To mitigate this vulnerability, update to the latest version of omec-project UPF, ensuring that all PFCP Session Establishment Requests are properly validated. Implement robust input validation to prevent malformed requests from being processed. Stay informed about updates and patches from the project! You can tackle this! Follow these steps, and you'll strengthen your defenses against potential disruptions! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| opennetworking/upf | all versions | — |