CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

creationtimestamp| type| source ---|---|--- 2023-12-22 12:21:49+00:00| seen| https://t.me/ctinow/158343 2024-01-18 09:41:36+00:00| seen| https://t.me/ctinow/169632...

CVE-2023-49391

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service DoS on AMF component via crafted NGAP message...

CVE-2023-49391

The CVE-2023-49391 issue affects free5GC version 3.3.0, specifically the AMF component handling NGAP messages. The root cause is insufficient validation of NGAP messages, enabling remote code execution and DoS via a crafted NGAP message (per Veracode and related feeds). A CVSSv3.1 base score of 7...