~ / search / GHSA-59hj-62f5-fgmc

GHSA-59hj-62f5-fgmc

free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

Source: GitHub Advisory Database (reviewed) Moderate CVE-2022-43677

Packages

EcosystemPackageAffectedFixed in
Go github.com/free5gc/free5gc <= 3.2.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in `aper.GetBitString`.

References

External links from the advisory. They lead to third-party sites.