| Package | Affected versions | Patched versions |
|---|---|---|
| open5gs | ≤ 2.7.2 |
An issue in UPF in Open5GS UPF versions up to v2.7.2 results an assertion failure vulnerability in PFCP session parameter validation. When processing a PFCP Session Establishment Request with PDN Type=0, the UPF fails to handle the invalid value propagated from SMF (or via direct attack), triggering a fatal assertion check and causing a daemon crash.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free