Pablo Valle Alvear

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** A DOS vulnerability could allow an attacker to register a new VNF (Virtual Network Function) value. This action could trigger the `args assets()` function defined in the arg-log.php file, which would then execute the args-abort.c file, causing the service to crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is related to an invalid pointer release vulnerability. An attacker could exploit this by sending a specially crafted json string to the Virtual Network Function (VNF), triggering the `ogs sbi message free` function, which may cause a service outage. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** No specific software or versions are mentioned in the provided descriptions. **Description** The issue is a Man in the Middle vulnerability, which could allow an attacker to intercept Virtual Network Function (VNF) communications, resulting in the exposure of sensitive information. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS (affected versions not specified) **Description** The issue is related to the lack of authentication in the Open5GS implementation of the GTP protocol for mobile networks. This allows a remote attacker to send an HTTP request to an Open5GS endpoint and retrieve stored information from the device. The estimated number of potentially affected devices worldwide is not available. There is no information about real-world incidents where this issue was exploited. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions up to 2.4.10 **Description** A vulnerability has been found in the library lib/core/ogs-tlv-msg.c of the component UDP Packet Handler, which can lead to denial of service. The manipulation affects unknown code. The exploit has been disclosed to the public and may be used. **Recommendations** For Open5GS versions up to 2.4.10, it is recommended to apply a patch to fix this issue. As a temporary workaround, consider restricting access to the UDP Packet Handler component until a patch is available.

**Name of the Vulnerable Software and Affected Versions** Open5GS versions up to 2.4.10 **Description** A vulnerability was found in the library lib/sbi/client.c of the component AMF, affecting an unknown functionality. The manipulation leads to denial of service. The attack can be launched remotely. **Recommendations** For Open5GS versions up to 2.4.10, it is recommended to apply a patch to fix this issue. The patch with the name 724fa568435dae45ef0c3a48b2aabde052afae88 should be applied. As a temporary workaround, consider restricting access to the vulnerable component AMF until a patch is available.