https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 20 Oct 2026 08:45:53 +0000 https://cve.radiocsirt.org/vuln/cve-2021-41794 <p>ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with &#34;internet&#34; as the PDI Network Instance. The first character is interpreted as a length value to be used in a memcpy call. The destination buffer is only 100 bytes long on the stack. Then, &#39;i&#39; gets interpreted as 105 bytes to copy from the source buffer to the destination buffer.</p> <p>ogs_fqdn_parse in Open5GS 1.0.0 through 2.3.3 inappropriately trusts a client-supplied length value, leading to a buffer overflow. The attacker can send a PFCP Session Establishment Request with &#34;internet&#34; as the PDI Network Instance. The first character is interpreted as a length value to be used in a memcpy call. The destination buffer is only 100 bytes long on the stack. Then, &#39;i&#39; gets interpreted as 105 bytes to copy from the source buffer to the destination buffer.</p> https://cve.radiocsirt.org/vuln/cve-2021-41794