6.9
Moyenne
CVE-2026-90707 A security flaw has been discovered in Open5GS up to 2.7.x
Description
A security flaw has been discovered in Open5GS up to 2.7.x. Affected is the function amf_nnrf_try_old_amf_discovery_fallback of the file src/amf/nnrf-handler.c of the component Old AMF Discovery Fallback. The manipulation of the argument discovery_option results in use after free. The attack may be performed from remote. The patch is identified as ddd683a35f8aaac2b7b9884a24cd53bddfc65238. Applying a patch is advised to resolve this issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Open5GS | 2.7 | Pas de correctif indiqué |
| Open5GS | 2.6 | Pas de correctif indiqué |
| Open5GS | 2.5 | Pas de correctif indiqué |
| Open5GS | 2.4 | Pas de correctif indiqué |
| Open5GS | 2.3 | Pas de correctif indiqué |
| Open5GS | 2.2 | Pas de correctif indiqué |
| Open5GS | 2.1 | Pas de correctif indiqué |
| Open5GS | 2.0 | Pas de correctif indiqué |
Références
- VDB-403249 | Open5GS Old AMF Discovery Fallback nnrf-handler.c amf_nnrf_try_old_amf_discovery_fallback use after free vuldb.com
- VDB-403249 | CTI Indicators (IOB, IOC, IOA) vuldb.com
- CVE-2026-90707 | CVE Analysis and Report vuldb.com
- Submit #918267 | Open5GS Open5GS AMF <2.8.0 CWE-416: Use After Free vuldb.com
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Open5GS
Les 125 CVE de Open5GS →
CVE-2026-107166
A weakness has been identified in Open5GS up to 2.7.7
6.9
Moyenne
CVE-2026-92417
A vulnerability was found in Open5GS up to 2.8.0
7.1
Élevée
CVE-2026-92416
A vulnerability has been found in Open5GS up to 2.8.0
5.3
Moyenne
CVE-2026-91855
A security flaw has been discovered in Open5GS up to 2.7.7
6.9
Moyenne