CVE-2023-47346

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages...

PT-2023-30105 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5Gc affected versions not specified Description: The issue is related to a Cross-Site Request Forgery vulnerability. This vulnerability could allow an attacker to perform different actions on the platform as an administrator by changing t...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...

CVE-2022-38870

Free5gc v3.2.1 is vulnerable to Information disclosure...

PT-2022-7180 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 3.2.1 Description: The issue is related to information disclosure due to a lack of authentication for a critical function in the free5GC software, which is used for organizing 5G mobile network communications. This allows a...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...