GHSA-6944-6pmv-6mp2

free5gc Buffer Overflow vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-47345

Packages

Ecosystem	Package	Affected	Fixed in
Go	github.com/free5gc/free5gc	<= 3.3.0	no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.

References

External links from the advisory. They lead to third-party sites.

https://nvd.nist.gov/vuln/detail/CVE-2023-47345 advisory
https://github.com/free5gc/free5gc/issues/483 web
https://github.com/free5gc/free5gc package