Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to Denial Of Service DoS. The vulnerability exists due to a null pointer dereference when failing to resolve the IP of a ngap message resulting in an application crash...

Open5GS ngap-handler.c Denial of Service Vulnerability

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

GO-2022-1083 Panic on malformed messages in github.com/free5gc/aper

A malformed message can crash the free5gc/amf and free5gc/ngap decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43223

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

Memory corruption

open5gs v2.4.11 was discovered to contain a memory leak in the component ngap-handler.c. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted UE attachment...

CVE-2022-43223

CVE-2022-43223 affects Open5GS v2.4.11, with a memory leak in the ngap-handler.c component that can cause a Denial of Service via a crafted UE attachment. The NVD entry cites a CVSS v3.1 base score of 7.5 (HIGH) with network access, low attack complexity, no privileges, no user interaction, and i...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS v2.4.11 due to a memory leak in the ngap handler.c component. By using a specially crafted UE attachment, an attacker can exploit this...

PT-2022-26800 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: open5gs version 2.4.11 Description: The issue is related to a memory leak in the ngap-handler.c component. This allows attackers to cause a Denial of Service DoS via a crafted UE attachment. Recommendations: For open5gs version 2.4.11, consid...

free5GC Denial of Service Vulnerability

free5GC is a 5th Generation 5G mobile core network open source project by free5GC. free5GC version 3.2.1 suffers from a denial of service vulnerability. The vulnerability stems from the program's failure to properly come out with the wrong NGAP message, which is exploited by attackers to crash th...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...

GHSA-59HJ-62F5-FGMC free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

Design/Logic Flaw

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

The CVE-2022-43677 issue affects free5GC version 3.2.1, where a malformed NGAP message can trigger an index-out-of-range panic in aper.GetBitString, crashing both the AMF and NGAP decoders. The vulnerability stems from processing NGAP messages in the free5GC stack, leading to a denial of service ...