GitHub Advisoryadvisory · Go
GHSA-59hj-62f5-fgmc free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders
MEDIUM
Official page ↗
- Aliases
- CVE-2022-43677
- Ecosystem
- Go
- Packages
- github.com/free5gc/free5gc
- Severity
- Moderate
- CVSS vector
- CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
- Reviewed
- 2022-10-25
Affected packages
• Go github.com/free5gc/free5gc: <= 3.2.1 (no fix yet)
Description
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in `aper.GetBitString`.
Related
Alias · CVE (1)
- CVE-2022-43677 In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString. vulnerability