PT-2022-7076 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: free5GC version 3.2.1 Description: The issue is related to a malformed NGAP message that can cause the AMF and NGAP decoders to crash due to an index-out-of-range panic in the aper.GetBitString function. This can lead to a denial of service...

CVE-2022-43677: Undefined Security Weakness

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

The CVE-2022-43677 issue affects free5GC version 3.2.1, where a malformed NGAP message can trigger an index-out-of-range panic in aper.GetBitString, crashing both the AMF and NGAP decoders. The vulnerability stems from processing NGAP messages in the free5GC stack, leading to a denial of service ...