| 제목 | Open5GS Project Open5GS 2.7.7 Use After Free |
|---|
| 설명 | Open5GS 2.7.7 contains a heap-use-after-free in the AMF component's process-shutdown path: during mf_context_final (src/amf/context.c), ogs_hash_destroy clears a hash table by re-hashing entry keys, and AddressSanitizer reports that one key has already been freed during the same teardown, causing ogs_hash_clear -> ogs_hash_set_debug -> find_entry -> hashfunc_default (lib/core/ogs-hash.c:258) to read freed memory. |
|---|
| 원천 | ⚠️ https://github.com/open5gs/open5gs/security/advisories/GHSA-88pq-hpwv-2vjw |
|---|
| 사용자 | Buggweb (UID 98839) |
|---|
| 제출 | 2026. 06. 08. PM 05:19 (1 월 ago) |
|---|
| 모더레이션 | 2026. 07. 09. AM 07:54 (1 month later) |
|---|
| 상태 | 수락 |
|---|
| VulDB 항목 | 377122 [Open5GS 2.7.7 AMF src/amf/context.c amf_context_final 메모리 손상] |
|---|
| 포인트들 | 20 |
|---|