PT-2023-1375 · Open5Gs · Open5Gs Gtp

Qiang Li + 1 · Publicado 2023-01-31 · Atualizado 2023-02-08 · CVE-2023-23846

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Open5GS GTP versions prior to 2.4.13 Open5GS GTP versions prior to 2.5.7

Description The issue is related to insufficient length validation in the Open5GS GTP library, which can cause an infinite loop when parsing extension headers in GPRS tunneling protocol (GPTv1-U) messages. This occurs when a protocol payload has any extension header length set to zero, resulting in denial of service and excessive resource consumption. The affected process becomes immediately unresponsive.

Recommendations For versions prior to 2.4.13, update to version 2.4.13 or later. For versions prior to 2.5.7, update to version 2.5.7 or later. As a temporary workaround, consider restricting the parsing of extension headers in GPTv1-U messages to prevent infinite loops until a patch is available.

Correção

Allocation of Resources Without Limits

Resource Exhaustion

Improper Resource Release

Enumeração de Fraquezas

CWE-770

CWE-400

CWE-404

Identificadores relacionados

BDU:2023-00725

CVE-2023-23846

Produtos afetados

Open5Gs Gtp

Referências · 7

• https://osv.dev/vulnerability/CVE-2023-23846 · Aviso do Fabricante
• https://synopsys.com/blogs/software-security/cyrc-advisory-open5gs-gtp-library · Nota
• https://t.me/cibsecurity/57250 · Publicação no Telegram
• https://t.me/cvenotify/43901 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2023-23846 · Nota de Segurança
• https://bdu.fstec.ru/vul/2023-00725 · Nota de Segurança
• https://t.me/cvenotify/43286 · Publicação no Telegram