Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:41:19 +0000 CVE-2026-108105 — Open5GS through 2.8.0 MME Reachable Assertion via GTPv1 SGSN Context Request https://vulnerability.circl.lu/vuln/cve-2026-108105 <p><strong>Affected:</strong> open5gs</p> <p>Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can supply an invalid address length to terminate open5gs-mmed, denying service to all subscribers.</p> <p><strong>Affected:</strong> open5gs</p> <p>Open5GS through 2.8.0 contains a reachable assertion vulnerability in mme_gn_handle_sgsn_context_request() that allows remote unauthenticated attackers to crash the MME via malformed SGSN Address IEs. Attackers sending GTPv1-C traffic from a configured SGSN address with a known UE IMSI or P-TMSI can supply an invalid address length to terminate open5gs-mmed, denying service to all subscribers.</p> https://vulnerability.circl.lu/vuln/cve-2026-108105