Lucene search
+L

875 matches found

Cvelist
Cvelist
•added 2024/01/02 12:00 a.m.•45 views

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

5.8AI score0.00636EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/01/02 12:00 a.m.•36 views

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

7.7AI score0.00676EPSS
SaveExploits1References2
CVE
CVE
•added 2024/01/02 12:00 a.m.•114 views

CVE-2023-50020

Open5GS v2.6.6 is affected by CVE-2023-50020. A SIGPIPE condition can crash the AMF, per multiple sources (NVD/Red Hat/CNNVD). Reported impact is availability disruption (CVE base score 7.5, HIGH). No exploitation details are provided in the core documents. A practical workaround documented by PT...

7.5CVSS7.4AI score0.00676EPSS
SaveExploits1References2Affected Software1
Mend
Mend
•added 2024/01/02 12:00 a.m.•1 views

CVE-2023-50019

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

8.2CVSS0.00636EPSS
SaveExploits1References4
Positive Technologies
Positive Technologies
•added 2024/01/02 12:00 a.m.•2 views

PT-2024-13847

Name of the Vulnerable Software and Affected Versions open5gs version 2.6.6 Description An issue was discovered in open5gs where the InitialUEMessage, specifically a registration request sent at a certain time, can cause the AMF to crash due to incorrect error handling of the Nudm UECM Registrati...

5.9CVSS5.7AI score0.00636EPSS
SaveExploits1References9
Mend
Mend
•added 2024/01/02 12:00 a.m.•2 views

CVE-2023-50020

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

8.7CVSS0.00676EPSS
SaveExploits1References4
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/02 12:00 a.m.•4 views

CVE-2023-50020: Uncontrolled Resource Consumption

An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF...

7.5CVSS7.3AI score0.00676EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/01/02 12:00 a.m.•4 views

CVE-2023-50019: Improper Handling of Exceptional Conditions

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of NudmUECMRegistration response...

5.9CVSS6.2AI score0.00636EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/22 12:31 p.m.•48 views

GHSA-JCRR-RR6W-8C83 free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

7.5CVSS7.8AI score0.01044EPSS
SaveExploits1References4
Github Security Blog
Github Security Blog
•added 2023/12/22 12:31 p.m.•39 views

free5GC AMF denial of service vulnerability

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

7.5CVSS8.3AI score0.01044EPSS
SaveExploits1References4Affected Software1
NVD
NVD
•added 2023/12/22 11:15 a.m.•25 views

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

7.5CVSS0.01044EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/22 11:15 a.m.•10 views

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

7.5CVSS6.2AI score0.01044EPSS
SaveExploits1References2
Prion
Prion
•added 2023/12/22 11:15 a.m.•33 views

Code injection

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

5CVSS8.3AI score0.01044EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2023/12/22 12:00 a.m.•21 views

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

8AI score0.01044EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/12/22 12:00 a.m.•42 views

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

8.1AI score0.01044EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2023/12/22 12:00 a.m.•16 views

PT-2023-31200 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: free5GC version 3.3.0 Description: An issue in the software allows remote attackers to execute arbitrary code and cause a denial of service DoS on the AMF component via a crafted NGAP message. Recommendations: For free5GC version 3.3.0,...

7.5CVSS8.4AI score0.01044EPSS
SaveExploits1References7
Mend
Mend
•added 2023/12/22 12:00 a.m.•1 views

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

8.7CVSS0.01044EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2023/12/22 12:00 a.m.•4 views

CVE-2023-49391: Improper Control of Generation of Code

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

7.5CVSS7.8AI score0.01044EPSS
SaveExploits1References2
SUSE CVE
SUSE CVE
•added 2023/02/15 6:14 a.m.•12 views

SUSE CVE-2006-4192

Multiple buffer overflows in MODPlug Tracker OpenMPT 1.17.02.43 and earlier and libmodplug 0.8 and earlier, as used in GStreamer and possibly other products, allow user-assisted remote attackers to execute arbitrary code via 1 long strings in ITP files used by the CSoundFile::ReadITProject functi...

5.1CVSS8.2AI score0.08998EPSS
SaveExploits1References4
OSV
OSV
•added 2022/11/19 12:30 a.m.•39 views

GHSA-M74X-FXJH-3QH9 Free5gc vulnerable to uncontrolled resource consumption

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

7.5CVSS7.5AI score0.00767EPSS
SaveExploits1References3
Rows per page
Query Builder