Lucene search

GoogleOSV:CVE-2023-47025

HistoryNov 16, 2023 - 11:15 p.m.

CVE-2023-47025

2023-11-1623:15:08

Google

osv.dev

free5gc

version 3.3.0

denial of service

free5gc-compose

local attacker

software

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.

CPENameOperatorVersion
free5gceq3.0.6
free5gceq3.0.4
free5gceq3.0.5
free5gceq3.1.0
free5gceq3.0.2
free5gceq3.0.7
free5gceq3.0.1
free5gceq3.2.0
free5gceq3.2.1
free5gceq3.1.1

Name	Operator	Version
free5gc	eq	3.0.6
free5gc	eq	3.0.4
free5gc	eq	3.0.5
free5gc	eq	3.1.0
free5gc	eq	3.0.2
free5gc	eq	3.0.7
free5gc	eq	3.0.1
free5gc	eq	3.2.0
free5gc	eq	3.2.1
free5gc	eq	3.1.1

Rows per page:

1-10 of 111

References

github.com/free5gc/free5gc/issues/501

5.5 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:CVE-2023-47025