Yüksek CVSS 7.5
CVE-2026-106806: CVE-2026-106806: denetimsiz kaynak tüketimi
Açıklama (NVD)
A memory exhaustion issue exists in Open5GS v2.8.0 in the HTTP/2 SBI server. Repeated header names cause previously allocated header strings to be leaked, and HPACK compression allows an unauthenticated remote attacker to trigger tens of thousands of duplicate headers with a small request. Repeated crafted requests can cause persistent heap growth, exhaust process memory, and terminate the affected Open5GS network function, resulting in denial of service.
Özet bilgiler
- CVSS v3.1
- 7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - EPSS
- %0,44 (yüzdelik 38)
- CWE
- CWE-400
- Yama
- Yok / bilinmiyor