CVE-2022-43677

The CVE-2022-43677 issue affects free5GC version 3.2.1, where a malformed NGAP message can trigger an index-out-of-range panic in aper.GetBitString, crashing both the AMF and NGAP decoders. The vulnerability stems from processing NGAP messages in the free5GC stack, leading to a denial of service ...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...