提出 #851630: Open5GS Project Open5GS 2.7.7 Use After Free情報

タイトルOpen5GS Project Open5GS 2.7.7 Use After Free
説明Open5GS 2.7.7 contains a heap-use-after-free in the AMF component's process-shutdown path: during mf_context_final (src/amf/context.c), ogs_hash_destroy clears a hash table by re-hashing entry keys, and AddressSanitizer reports that one key has already been freed during the same teardown, causing ogs_hash_clear -> ogs_hash_set_debug -> find_entry -> hashfunc_default (lib/core/ogs-hash.c:258) to read freed memory.
ソース⚠️ https://github.com/open5gs/open5gs/security/advisories/GHSA-88pq-hpwv-2vjw
ユーザー
 Buggweb (UID 98839)
送信2026年06月08日 17:19 (1 月 ago)
モデレーション2026年07月09日 07:54 (1 month later)
ステータス承諾済み
VulDBエントリ377122 [Open5GS 2.7.7 AMF src/amf/context.c amf_context_final メモリ破損]
ポイント20

Do you want to use VulDB in your project?

Use the official API to access entries easily!