open5gs v2.7.2 Security Fix: Heap/Stack Overflows and NULL Pointer Dereference

Vulnerability Overview In open5gs version v2.7.2, multiple security vulnerabilities were identified, primarily including heap overflows, stack overflows, and null pointer dereferences. These vulnerabilities may impact system stability and security. Scope of Impact Heap Overflow: - During PLMN-ID parsing (#3154) - In open5gs-hss/duka (#3155) - In open5gs-nmm/duka (#3156) - In open5gs-nmm/s1ap (#3153) Stack Overflow: - In open5gs-hss/duka (#3155) - In PCRF/PCF (#3157) Null Pointer Dereference: - In SBI Re-factor NF Instance Context (#3093) Remediation Heap Overflow: - During PLMN-ID parsing (#3154): Fixed by @acmetom - In open5gs-hss/duka (#3155): Fixed by @acmetom - In open5gs-nmm/duka (#3156): Fixed by @acmetom - In open5gs-nmm/s1ap (#3153): Fixed by @acmetom Stack Overflow: - In open5gs-hss/duka (#3155): Fixed by @acmetom - In PCRF/PCF (#3157): Fixed by @acmetom Null Pointer Dereference: - In SBI Re-factor NF Instance Context (#3093): Fixed by @acmetom Other Related Fixes MME: Allow CreateSessionResponse without PAA IE (#3167) SBI: SearchResultValidityPeriod changed from 3600 to 30s (#3211) MME: Issue keeping PDN-Type unchanged (#3209) SBI: Conversion of Assertion to ERROR Handling (#3207) MME: IP allocation from SGSN request assigned to SMF (#3220) AMF: Storage of 5G AKA confirmation URL (#3221) MME/GTP: Management of multiple GTP transactions (#3240) UDM: Addition of Am3GppAccessRegistration information retrieval functionality (#3249) Update docs.md: Fixed by @nik-nettox (#3287) RFC: Fix Gn SGSN context message (#3038) POOL: Removal of ogs_pool_cycle (#3289) MME: Fix error indication (#3302) MME: UEContextReleaseCommand cause (#3280) SMF: Initiate PFCP Session Modification Request if extra flows are present in RAR (#3311) MME/SMF: Set diameter TC_TIMER (#3282) AMF: Addition of Additional-GUTI to ClearText (#3315) UPF: Performance enhancement (#3306) Add NGAP LB blog: Fixed by @nik-nettox (#3329) TFT: Increase number of flows from 8 to 16 (#3339) TFT: Increase number of flows from 8 to 16 (#3339) TFT: Increase number of flows from 8 to 16 (#3343) MEM: Valgrind memcheck findings (#3349) Test FreeBSD-14.1-STABLE (#3350) NRF: Fix subscription validityTime (#3360, #3361, #3363, #3364) New Contributors @erremdk made their first contribution in #3249 @nik-nettox made their first contribution in #3287 Full Changelog v2.7.1...v2.7.2 Contributors asdfuser, edipascate, and 6 others Assets None Reactions All reactions: 6 people --- Code Blocks No specific POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

open5gs v2.7.2 Security Fix: Heap/Stack Overflows and NULL Pointer Dereference

More from this source