Open5GS SMF types.c ogs_gtp2_parse_tft denial of service_CVE-2026-2517

6.9 / 10

MEDIUM

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P

Description

A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Basic Information

ID CVE-2026-2517

Source VulDB

Published Feb 15, 2026 at 12:32

Affected Product

Vendor n/a

Product Open5GS

Version 2.7.0

Affected Versions n/a Open5GS 2.7.0
n/a Open5GS 2.7.1
n/a Open5GS 2.7.2
n/a Open5GS 2.7.3
n/a Open5GS 2.7.4
n/a Open5GS 2.7.5
n/a Open5GS 2.7.6

CWE Classification

CWE-404

References

{
    "lastseen": "",
    "description": "A security flaw has been discovered in Open5GS up to 2.7.6. This vulnerability affects the function ogs_gtp2_parse_tft in the library lib/gtp/v2/types.c of the component SMF. Performing a manipulation of the argument pf[0].content.length results in denial of service. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.",
    "published": "2026-02-15T12:32:08.127Z",
    "modified": "2026-02-15T12:32:08.127Z",
    "type": "cve",
    "title": "Open5GS SMF types.c ogs_gtp2_parse_tft denial of service",
    "source": "VulDB",
    "references": "https://vuldb.com/?id.346108\nhttps://vuldb.com/?ctiid.346108\nhttps://vuldb.com/?submit.738332\nhttps://github.com/open5gs/open5gs/issues/4281\nhttps://github.com/open5gs/open5gs/issues/4281#issue-3807802287\nhttps://github.com/open5gs/open5gs/",
    "id": "CVE-2026-2517",
    "bulletinFamily": "",
    "cwe": [
        "CWE-404"
    ],
    "cvelist": null,
    "sourceData": "n/a Open5GS 2.7.0\nn/a Open5GS 2.7.1\nn/a Open5GS 2.7.2\nn/a Open5GS 2.7.3\nn/a Open5GS 2.7.4\nn/a Open5GS 2.7.5\nn/a Open5GS 2.7.6",
    "sourceHref": "",
    "cvss": {
        "score": 6.9,
        "severity": "MEDIUM",
        "vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P",
        "version": "4.0"
    },
    "cvss2": [],
    "cvss3": {
        "version": "",
        "vectorString": "",
        "baseScore": 0,
        "baseSeverity": "",
        "attackVector": "",
        "attackComplexity": "",
        "privilegesRequired": "",
        "userInteraction": "",
        "scope": "",
        "confidentialityImpact": "",
        "integrityImpact": "",
        "availabilityImpact": "",
        "cvssV3": {
            "version": "",
            "vectorString": "",
            "baseScore": 0,
            "baseSeverity": "",
            "attackVector": "",
            "attackComplexity": "",
            "privilegesRequired": "",
            "userInteraction": "",
            "scope": "",
            "confidentialityImpact": "",
            "integrityImpact": "",
            "availabilityImpact": ""
        }
    },
    "href": "",
    "category_name": "CVE",
    "post_link": "",
    "product": "Open5GS",
    "version": "2.7.0",
    "vendor": "n/a",
    "ai_description": "",
    "ai_severity": "",
    "ai_vendor": "",
    "ai_product": "",
    "ai_version": "",
    "ai_score": 0
}