Open5GS Reachable Assertion Vulnerability in NRF Component Allowing Denial-of-Service

A reachable assertion vulnerability has been identified in Open5GS versions prior to 2.7.5. This vulnerability allows attackers with connectivity to the Network Repository Function (NRF) to cause a denial-of-service condition. The issue arises when an SBI request is made to delete the NRF's own registry, triggering a process check that crashes the NRF process and disrupts the discovery service.

Impact

Exploitation of this vulnerability leads to a crash of the NRF process, causing the discovery service to become unresponsive and unavailable.

Remediation

Users can upgrade to Open5GS version 2.7.5 to address this vulnerability.