Open5GS 2.5.6

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:open5gs:open5gs:2.5.6:*:*:*:*:*:*:*

part: a version: 2.5.6 update: *

VendorOpen5Gs (46057549-a067-5205-be70-0777ed412b1e)
ProductOpen5Gs (5cd42453-8f6c-5ee3-9353-93a20c7017ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openverso/open5gs purl2cpe 2026-06-01 10:13:03.874827
pkg:github/open5gs/open5gs purl2cpe 2026-06-01 10:13:03.874828

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-23846 vulnerable 2026-06-08 05:56:04.535649 Details available
Due to insufficient length validation in the Open5GS GTP library versions prior to versions 2.4.13 and 2.5.7, when parsing extension headers in GPRS tunneling protocol (GPTv1-U) messages, a protocol payload with any extension header length set to zero causes an infinite loop. The affected process becomes immediately unresponsive, resulting in denial of service and excessive resource consumption. CVSS3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H/E:P/RL:O/RC:C
Published: 2023-02-01T00:00:00.000Z
Updated: 2025-03-27T13:23:37.577Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.