GitHub Advisoryadvisory · Go

GHSA-q27h-hw2v-x5jm Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component

HIGH Published 2023-11-17 Modified 2023-11-17 Official page ↗
Aliases
CVE-2023-47025
Ecosystem
Go
Packages
github.com/free5gc/free5gc
Severity
High
Weaknesses
CWE-400, CWE-770
Reviewed
2023-11-17

Affected packages

• Go github.com/free5gc/free5gc: <= 3.3.0 (no fix yet)

Description

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.

Related

Alias · CVE (1)

  • CVE-2023-47025 An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component. vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-770 Allocation of Resources Without Limits or Throttling weakness

References