Open5GS MME versions <= 2.6.4 contain a reachable assertion in the Uplink NAS Transport packet handler. A packet missing its MME_UE_S1AP_ID field causes Open5gs to crash; an attacker may repeatedly send such packets to cause denial of service.
| Software | From | Fixed in |
|---|---|---|
| open5gs / open5gs | - | 2.6.4.x |