CVE-2022-43222

Name of the Vulnerable Software and Affected Versions open5gs version 2.4.11

Description The issue is related to a memory leak in the component src/smf/pfcp-path.c, which allows attackers to cause a Denial of Service (DoS) via a crafted PFCP packet.

Recommendations For open5gs version 2.4.11, consider restricting access to the vulnerable component src/smf/pfcp-path.c to minimize the risk of exploitation. As a temporary workaround, avoid processing crafted PFCP packets until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.