CVE-2022-3299

Name of the Vulnerable Software and Affected Versions Open5GS versions up to 2.4.10

Description A vulnerability was found in the library lib/sbi/client.c of the component AMF, affecting an unknown functionality. The manipulation leads to denial of service. The attack can be launched remotely.

Recommendations For Open5GS versions up to 2.4.10, it is recommended to apply a patch to fix this issue. The patch with the name 724fa568435dae45ef0c3a48b2aabde052afae88 should be applied. As a temporary workaround, consider restricting access to the vulnerable component AMF until a patch is available.