Ea1809

A weakness has been identified in Open5GS up to 2.7.7. This vulnerability affects the function ogs pfcp xact local create of the file src/upf/gtp-path.c of the component GTP-U Receive Path. This manipulation causes allocation of resources. The attack is possible to be carried out remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 9ffc252482d9b03ac01abcedbe95497ff4f95dd0. It is recommended to apply a patch to fix this issue.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A flaw in the PFCP Message Handler component, specifically within the `lib/pfcp/handler.c` file, allows for remote exploitation. A manipulation of this functionality can lead to a denial of service. **Recommendations** Apply patch 028e1dbb5e3271035ccee906ef417a97fc523f71 to resolve the issue.