GitHub Advisoryadvisory · Go

GHSA-cqvv-r3g3-26rf free5GC udm vulnerable to Invalid Curve Attack

HIGH Published 2023-10-23 Modified 2023-10-31 Official page ↗
Aliases
CVE-2023-46324
Ecosystem
Go
Packages
github.com/free5gc/udm
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-327, CWE-347
Reviewed
2023-10-24

Affected packages

• Go github.com/free5gc/udm: < 1.2.0 → fixed in 1.2.0

Description

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its private key and the attacker's public key.

Related

Alias · CVE (1)

  • CVE-2023-46324 pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared… vulnerability

Weakness · CWE (2)

  • CWE-327 Use of a Broken or Risky Cryptographic Algorithm weakness
  • CWE-347 Improper Verification of Cryptographic Signature weakness

References