GitHub Advisoryadvisory · Go

GHSA-jcrr-rr6w-8c83 free5GC AMF denial of service vulnerability

HIGH Published 2023-12-22 Modified 2024-09-12 Official page ↗
Aliases
CVE-2023-49391
Ecosystem
Go
Packages
github.com/free5gc/amf
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-94
Reviewed
2023-12-22

Affected packages

• Go github.com/free5gc/amf: <= 1.2.0 (no fix yet)

Description

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

Related

Alias · CVE (1)

  • CVE-2023-49391 An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on… vulnerability

Weakness · CWE (1)

  • CWE-94 Improper Control of Generation of Code weakness

References