free5GC 访问控制错误漏洞

free5GC is an open source project for 5th Generation 5G mobile core networks open sourced by free5GC. A security vulnerability exists in free5GC version v3.2.1, which stems from vulnerability to information leakage...

CVE-2022-38870

CVE-2022-38870 affects Free5gc 3.2.1, where an information disclosure vulnerability exists. The connected nuclei template describes the issue as susceptible to information disclosure, with an attacker possibly obtaining sensitive information, and potentially modifying data or performing unauthori...

PT-2022-7180 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: Free5gc version 3.2.1 Description: The issue is related to information disclosure due to a lack of authentication for a critical function in the free5GC software, which is used for organizing 5G mobile network communications. This allows a...

CVE-2022-38870

Free5gc v3.2.1 is vulnerable to Information disclosure...

free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

GHSA-59HJ-62F5-FGMC free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

Design/Logic Flaw

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

The CVE-2022-43677 issue affects free5GC version 3.2.1, where a malformed NGAP message can trigger an index-out-of-range panic in aper.GetBitString, crashing both the AMF and NGAP decoders. The vulnerability stems from processing NGAP messages in the free5GC stack, leading to a denial of service ...

PT-2022-7076 · Free5Gc · Free5Gc

Name of the Vulnerable Software and Affected Versions: free5GC version 3.2.1 Description: The issue is related to a malformed NGAP message that can cause the AMF and NGAP decoders to crash due to an index-out-of-range panic in the aper.GetBitString function. This can lead to a denial of service...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...