PT-2023-1375 · Open5Gs · Open5Gs Gtp

Qiang Li + 1 · Published 2023-01-31 · Updated 2023-02-08 · CVE-2023-23846

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Open5GS GTP versions prior to 2.4.13 Open5GS GTP versions prior to 2.5.7

Description The issue is related to insufficient length validation in the Open5GS GTP library, which can cause an infinite loop when parsing extension headers in GPRS tunneling protocol (GPTv1-U) messages. This occurs when a protocol payload has any extension header length set to zero, resulting in denial of service and excessive resource consumption. The affected process becomes immediately unresponsive.

Recommendations For versions prior to 2.4.13, update to version 2.4.13 or later. For versions prior to 2.5.7, update to version 2.5.7 or later. As a temporary workaround, consider restricting the parsing of extension headers in GPTv1-U messages to prevent infinite loops until a patch is available.

Fix

Allocation of Resources Without Limits

Resource Exhaustion

Improper Resource Release

Weakness Enumeration

CWE-770

CWE-400

CWE-404

Related Identifiers

BDU:2023-00725

CVE-2023-23846

Affected Products

Open5Gs Gtp

References · 7

• https://osv.dev/vulnerability/CVE-2023-23846 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-23846 · Security Note
• https://bdu.fstec.ru/vul/2023-00725 · Security Note
• https://synopsys.com/blogs/software-security/cyrc-advisory-open5gs-gtp-library · Note
• https://t.me/cibsecurity/57250 · Telegram Post
• https://t.me/cvenotify/43901 · Telegram Post
• https://t.me/cvenotify/43286 · Telegram Post