CVE-2026-2517: Open5GS SMF types.c ogs_gtp2_parse_tft denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogsgtp2parsetft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-2517?
CVE-2026-2517 is classified as a denial of service vulnerability.
How do I fix CVE-2026-2517?
To fix CVE-2026-2517, update Open5GS to version 2.8.0 or later.
What components are affected by CVE-2026-2517?
CVE-2026-2517 affects the SMF component of Open5GS, specifically the ogs_gtp2_parse_tft function.
What versions of Open5GS are vulnerable to CVE-2026-2517?
Open5GS versions up to and including 2.7.6 are vulnerable to CVE-2026-2517.
How can an attacker exploit CVE-2026-2517?
An attacker can exploit CVE-2026-2517 by manipulating the pf[0].content.length argument in a crafted request.