Lucene search
HistoryOct 24, 2022 - 2:15 p.m.
CVE-2022-43677
vulnerability
free5gc
ngap message
amf
ngap decoders
index-out-of-range
panic
aper.getbitstring
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.
Affected configurations
Node
free5gcfree5gcMatch3.2.1
Related
osv
osv
Panic on malformed messages in github.com/free5gc/aper
2022-11-02 21:52:22
CVE-2022-43677
2022-10-24 14:15:53
prion
prion
Design/Logic Flaw
2022-10-24 14:15:00
cve
cve
CVE-2022-43677
2022-10-24 14:15:53
github
github
cnvd
cnvd
free5GC Denial of Service Vulnerability
2022-10-26 00:00:00
thn
thn
Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service
2023-10-28 07:20:00
cvelist
cvelist
CVE-2022-43677
2022-10-24 00:00:00
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
23.8%
Related for NVD:CVE-2022-43677