Lucene search

K
osvGoogleOSV:GHSA-M74X-FXJH-3QH9
HistoryNov 19, 2022 - 12:30 a.m.

Free5gc vulnerable to uncontrolled resource consumption

2022-11-1900:30:55
Google
osv.dev
7
free5gc
amf
vulnerability
resource consumption
nas messages

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

31.6%

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.001 Low

EPSS

Percentile

31.6%

Related for OSV:GHSA-M74X-FXJH-3QH9