CVE-2022-43221: High severity open5gs open5gs vulnerability
Published Nov 1, 2022
·Updated
open5gs v2.4.11 was discovered to contain a memory leak in the component src/upf/pfcp-path.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted PFCP packet.
Affected Software
1 affected component
open5gs open5gs=2.4.11
Event History
Nov 1, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for this issue?
The vulnerability ID for this issue is CVE-2022-43221.
2
What is the affected software?
The affected software is Open5gs version 2.4.11.
3
What is the severity of CVE-2022-43221?
The severity of CVE-2022-43221 is high with a CVSS score of 7.5.
4
How does CVE-2022-43221 allow a Denial of Service (DoS) attack?
CVE-2022-43221 allows a DoS attack by exploiting a memory leak in the component 'src/upf/pfcp-path.c' in Open5gs version 2.4.11 through a crafted PFCP packet.
5
Is there a fix available for CVE-2022-43221?
Yes, a fix for CVE-2022-43221 is available. It is recommended to update to the latest version of Open5gs to mitigate the vulnerability.