Lucene search
GoogleOSV:CVE-2022-43677HistoryOct 24, 2022 - 2:15 p.m.
CVE-2022-43677
2022-10-2414:15:53
Google
osv.dev
3
free5gc
vulnerability
fix
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.9%
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.
Related
osv
osv
Panic on malformed messages in github.com/free5gc/aper
2022-11-02 21:52:22
cve
cve
CVE-2022-43677
2022-10-24 14:15:53
github
github
nvd
nvd
CVE-2022-43677
2022-10-24 14:15:53
prion
prion
Design/Logic Flaw
2022-10-24 14:15:00
cnvd
cnvd
free5GC Denial of Service Vulnerability
2022-10-26 00:00:00
thn
thn
Researchers Uncover Wiretapping of XMPP-Based Instant Messaging Service
2023-10-28 07:20:00
cvelist
cvelist
CVE-2022-43677
2022-10-24 00:00:00
5.5 Medium
CVSS3
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H
5.5 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
23.9%
Related for OSV:CVE-2022-43677