~ / search / GHSA-jcrr-rr6w-8c83

GHSA-jcrr-rr6w-8c83

free5GC AMF denial of service vulnerability

Source: GitHub Advisory Database (reviewed) High CVE-2023-49391

Packages

EcosystemPackageAffectedFixed in
Go github.com/free5gc/amf <= 1.2.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

References

External links from the advisory. They lead to third-party sites.