Lucene search
GitHub Advisory DatabaseGHSA-M74X-FXJH-3QH9HistoryNov 19, 2022 - 12:30 a.m.
Free5gc vulnerable to uncontrolled resource consumption
2022-11-1900:30:55
CWE-400
GitHub Advisory Database
github.com
6
free5gc
v3.0.5
amf
vulnerability
resource consumption
nas messages
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
31.6%
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.
Affected configurations
Node
free5gcfree5gcRange<3.0.5
| CPE | Name | Operator | Version |
|---|---|---|---|
| github.com/free5gc/free5gc | lt | 3.0.5 |
Related
osv
osv
CVE-2022-38871
2022-11-18 23:15:20
Free5gc vulnerable to uncontrolled resource consumption
2022-11-19 00:30:55
cve
cve
CVE-2022-38871
2022-11-18 23:15:20
cvelist
cvelist
CVE-2022-38871
2022-11-18 00:00:00
nvd
nvd
CVE-2022-38871
2022-11-18 23:15:20
prion
prion
Design/Logic Flaw
2022-11-18 23:15:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
31.6%
Related for GHSA-M74X-FXJH-3QH9