Franklin

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A flaw in the SMF component allows remote attackers to cause a denial of service. The issue exists within the `smf nsmf handle update data in vsmf()` function located in the `/src/smf/nsmf-handler.c` file, where improper manipulation of the `qosFlowProfile` argument triggers the condition. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `smf nsmf handle update data in vsmf()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A flaw in the SMF component allows remote attackers to cause a denial of service. This occurs through the manipulation of the `smf nsmf handle create sm context()` function. **Recommendations** Update to a version later than 2.7.7. As a temporary workaround, restrict access to the `smf nsmf handle create sm context()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote denial of service can be triggered in the SMF component through the manipulation of the `ogs nas parse qos rules()` function. **Recommendations** Update to a version later than 2.7.7. As a temporary workaround, restrict access to the SMF component to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote denial of service can occur in the SMF component due to the manipulation of the `n1SmMsg` argument. This issue resides in the `gsm handle pdu session modification qos flow descriptions()` function within the `src/smf/gsm-handler.c` file. **Recommendations** As a temporary workaround, restrict access to the `gsm handle pdu session modification qos flow descriptions()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A denial of service issue exists in the SMF component. A remote attacker can trigger this by manipulating the `gsm build pdu session establishment accept()` function within the `/src/smf/gsm-build.c` file during PDU Session Establishment. **Recommendations** As a temporary workaround, restrict access to the SMF component or the `gsm build pdu session establishment accept()` function to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A flaw in the SMF component allows a remote attacker to cause a denial of service. This issue occurs within the `smf nsmf handle created data in vsmf()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `smf nsmf handle created data in vsmf()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote denial of service issue exists in the SMF component. The problem occurs within the `OpenAPI list create()` function, where specific manipulation can cause the system to become unavailable. **Recommendations** As a temporary workaround, restrict access to the `OpenAPI list create()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote denial of service issue exists in the SMF component. The flaw is located in the `update authorized pcc rule and qos()` function within the `/src/smf/npcf-handler.c` file. Manipulation of this function allows a remote attacker to cause a system crash or unavailability. **Recommendations** As a temporary workaround, restrict access to the `update authorized pcc rule and qos()` function in the SMF component to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote manipulation in the SMF component can lead to a null pointer dereference, which occurs when a program attempts to read or write to a memory location using a null pointer. This issue specifically affects the `smf nsmf handle create data in hsmf()` function. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions prior to 2.7.8 **Description** A remote denial of service issue exists in the SMF component. The problem is located in the `smf n4 build qos flow to modify list()` function within the `/src/smf/n4-build.c` file. **Recommendations** Update to a version newer than 2.7.7. As a temporary workaround, restrict access to the SMF component to minimize the risk of exploitation.