NIXPKGS-2026-0116
GitHub issue
published on 5 Feb 2026
by @LeSuisse Activity log
- Created automatic suggestion
- @LeSuisse removed package open5gs-webui
- @LeSuisse accepted
- @LeSuisse published on GitHub
Open5GS VoLTE Cx-Test hss-cx-path.c hss_ogs_diam_cx_mar_cb stack-based overflow
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function hss_ogs_diam_cx_mar_cb of the file src/hss/hss-cx-path.c of the component VoLTE Cx-Test. The manipulation of the argument OGS_KEY_LEN results in stack-based buffer overflow. The attack may be launched remotely. The patch is identified as 54dda041211098730221d0ae20a2f9f9173e7a21. A patch should be applied to remediate this issue.
Affected products
Open5GS
- ==2.7.3
- ==2.7.5
- ==2.7.0
- ==2.7.4
- ==2.7.1
- ==2.7.6
- ==2.7.2
Package maintainers
-
@Bot-wxt1221 Bot-wxt1221 <3264117476@qq.com>