| タイトル | Open5GS <= v2.7.5 Denial of Service |
|---|
| 説明 | A denial of service vulnerability exists in Open5GS AMF (version v2.7.5 and earlier) caused by a failed assertion in the amf_ue module. This issue is triggered when a UE and a single gNB repeatedly connect and disconnect under specific network conditions.
The flaw causes the AMF process to crash after approximately 1 to 3 minutes of continuous UE connect/disconnect simulation, resulting in loss of service and the gNB going offline. An attacker can exploit this vulnerability remotely by forcing frequent UE disconnections and reconnections, causing the AMF to terminate unexpectedly and disrupting normal 5G core network operations.
This vulnerability has been evaluated using the CVSS v4.0 scoring system and received a base score of 8.8 (High severity) with the following vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H
The vulnerability is remotely exploitable without requiring any privileges or user interaction, and it has a low attack complexity. While it does not directly compromise data confidentiality or integrity, it causes a high impact on both general availability and the availability of critical security functions in the 5G core network, specifically the AMF component, which handles registration, authentication, and session management.
A successful exploit can cause persistent denial of access to the network by disrupting essential signaling processes, making this a highly impactful denial-of-service vulnerability that requires immediate attention in Open5GS deployments. |
|---|
| ソース | ⚠️ https://github.com/open5gs/open5gs/issues/3863 |
|---|
| ユーザー | xiaohan zheng (UID 88539) |
|---|
| 送信 | 2025年07月30日 16:46 (1 年 ago) |
|---|
| モデレーション | 2025年08月13日 21:03 (14 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 319333 [Open5GS 迄 2.7.5 AMF ngap_build_downlink_nas_transport サービス拒否] |
|---|
| ポイント | 0 |
|---|