Lucene search

GoogleOSV:CVE-2023-47347

HistoryNov 15, 2023 - 10:15 p.m.

CVE-2023-47347

2023-11-1522:15:27

Google

osv.dev

buffer overflow

free5gc

denial of service

pfcp messages

software

vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes.

CPENameOperatorVersion
free5gceq3.0.6
free5gceq3.0.4
free5gceq3.0.5
free5gceq3.1.0
free5gceq3.0.2
free5gceq3.0.7
free5gceq3.0.1
free5gceq3.2.0
free5gceq3.2.1
free5gceq3.1.1

Name	Operator	Version
free5gc	eq	3.0.6
free5gc	eq	3.0.4
free5gc	eq	3.0.5
free5gc	eq	3.1.0
free5gc	eq	3.0.2
free5gc	eq	3.0.7
free5gc	eq	3.0.1
free5gc	eq	3.2.0
free5gc	eq	3.2.1
free5gc	eq	3.1.1

Rows per page:

1-10 of 111

References

github.com/free5gc/free5gc/issues/496

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7 High

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

17.1%

JSON

Related for OSV:CVE-2023-47347