free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version v3.3.0, which originated from allowing a local attacker to cause a denial of service via the free5gc-compose component...

PT-2023-30293 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 3.3.0 Description: The issue allows a local attacker to cause a denial of service via the free5gc-compose component. Recommendations: For Free5gc version 3.3.0, at the moment, there is no information about a newer version that...

CVE-2023-47025

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...

CVE-2023-47025

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...

CVE-2023-47025

CVE-2023-47025 affects Free5GC v3.3.0, where a local attacker can trigger a DoS via the free5gc-compose component. Public sources in the connected documents describe the root cause as a null pointer dereference occurring when failing to resolve the IP of an NGAP message, leading to application cr...

CVE-2023-47025

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component...

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

Buffer Overflow

free5gc is vulnerable to Buffer Overflow. The vulnerability allows an attacker to submit crafted PFCP messages resulting in a buffer overflow, potentially leading to Denial of Service...

free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version 3.3.0, which originates from an attacker being able to cause a denial of service using a specially crafted PFCP message mutated to an overflow...

free5GC Security Vulnerabilities

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version 3.3.0, which stems from a vulnerability that allows an attacker to cause a denial of service via a constructed PFCP message and a malformed PFCP...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

PT-2023-30423 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: free5gc version 3.3.0 Description: The issue allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes. This can be achieved by exploiting a Buffer Overflow vulnerability...

CVE-2023-47347

CVE-2023-47347 affects free5gc version 3.3.0. The root cause is a Buffer Overflow in PFCP message handling, allowing an attacker to cause a denial of service when the PFCP Sequence Number is crafted to overflow bytes. The PT-2023-30423 entry confirms the impact as DoS via crafted PFCP messages an...

CVE-2023-47345

The CVE-2023-47345 vulnerability affects free5gc 3.3.0, caused by a Buffer Overflow in PFCP Heartbeat handling when a Recovery Time Stamp IE length is mutated to zero. This permits a crafted PFCP message to trigger a denial of service. No remediation details are provided in the connected document...

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...