Open5GS HTTP/2 header handling leaks memory and stalls servers
Mobile network servers can be stalled by a few requests from anyone.
Summary
The HTTP/2 SBI server in Open5GS does not free memory for repeated header names, so a small unauthenticated request can keep filling process memory until the network function terminates. The public issue lists v2.8.0 as affected, and operators of 5G core network functions are the ones exposed.
What to do
No fixed version is named in the sources. Check the project's issue #4788 and any new release.
Products and platforms
CVE IDs
Sources
- Write-up: github.com (opens in a new tab)
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen