PT-2024-13848 · Open5Gs · Open5Gs

Liuxiaoxinxinxin · Published 2024-01-02 · Updated 2025-06-18 · CVE-2023-50020

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions open5gs version 2.6.6

Description An issue was discovered in open5gs where SIGPIPE can be used to crash AMF.

Recommendations For open5gs version 2.6.6, as a temporary workaround, consider disabling the use of SIGPIPE until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2023-50020

Affected Products

Open5Gs

References · 9

• 🔥 https://github.com/open5gs/open5gs/issues/2734 · Exploit
• https://github.com/open5gs/open5gs/commit/1aba814938e3a1b2eec7014bf6ce132d34622e08 · Patch
• https://osv.dev/vulnerability/CVE-2023-50020 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-50020 · Security Note
• https://t.me/cibsecurity/74210 · Telegram Post
• https://t.me/cvenotify/126067 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1742331124641059061 · Twitter Post
• https://t.me/cvenotify/67084 · Telegram Post
• https://twitter.com/CVEnew/status/1742303060125466937 · Twitter Post