Lucene search
+L

245 matches found

OSV
OSV
•added 2025/01/31 12:15 p.m.•4 views

DEBIAN-CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

5.5CVSS5.5AI score0.00188EPSS
SaveExploits0References1
NVD
NVD
•added 2025/01/31 12:15 p.m.•20 views

CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS0.00188EPSS
SaveExploits0References2
OSV
OSV
•added 2025/01/31 12:15 p.m.•10 views

UBUNTU-CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS6.6AI score0.00188EPSS
SaveExploits0References7
OSV
OSV
•added 2025/01/31 11:25 a.m.•18 views

CVE-2025-21677 pfcp: Destroy device along with udp socket's netns dismantle.

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS5.8AI score
SaveExploits0References5
Cvelist
Cvelist
•added 2025/01/31 11:25 a.m.•31 views

CVE-2025-21677 pfcp: Destroy device along with udp socket's netns dismantle.

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS0.00188EPSS
SaveExploits0References2
CVE
CVE
•added 2025/01/31 11:25 a.m.•137 views

CVE-2025-21677

CVE-2025-21677 describes a Linux kernel PFCP issue where the device is destroyed along with the UDP socket’s netns. The root cause is that pfcp_newlink() links the PFCP device to dev_net(dev) rather than the socket’s netns, so removing netns ns1 can leave the device alive in dev_net(dev) and trig...

7.8CVSS6.9AI score0.00188EPSS
SaveExploits0References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/01/31 12:00 a.m.•1 views

CVE-2025-21677: Undefined Security Weakness

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS5.8AI score0.00188EPSS
SaveExploits0References3
OSV
OSV
•added 2024/07/16 12:00 a.m.•17 views

CVE-2024-40129

Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c...

8.6CVSS6.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
•added 2024/07/16 12:00 a.m.•11 views

PT-2024-28790 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.6.4 Description: The issue is related to a Buffer Overflow. It affects the /lib/pfcp/context.c file. Recommendations: For Open5GS version 2.6.4, consider restricting access to the vulnerable file /lib/pfcp/context.c to...

9.8CVSS6.9AI score0.00456EPSS
SaveExploits1References7
OSV
OSV
•added 2024/06/06 12:28 p.m.•8 views

CGA-PFCP-4VFR-FM8Q

Bulletin has no description...

7.2AI score
SaveExploits0
Veracode
Veracode
•added 2023/11/17 9:25 a.m.•35 views

Buffer Overflow

github.com/wmnsk/go-pfcp is vulnerable to Buffer Overflow. The vulnerability exists due to a lack of sanitization in the handling of PFCP Heartbeat messages, which allow to attacker to craft a malformed PFCP Heartbeat message with a mutated IE recovery time stamp...

7.5CVSS7AI score0.00851EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
•added 2023/11/16 12:30 a.m.•39 views

free5gc Buffer Overflow vulnerability

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS7.1AI score0.00851EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/11/16 12:30 a.m.•38 views

GHSA-6944-6PMV-6MP2 free5gc Buffer Overflow vulnerability

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS7.3AI score0.00851EPSS
SaveExploits1References3
NVD
NVD
•added 2023/11/15 10:15 p.m.•33 views

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

7.5CVSS0.00742EPSS
SaveExploits1References1
NVD
NVD
•added 2023/11/15 10:15 p.m.•26 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS0.00851EPSS
SaveExploits1References1
Prion
Prion
•added 2023/11/15 10:15 p.m.•23 views

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

5CVSS7.2AI score0.00742EPSS
SaveExploits1References1Affected Software1
Prion
Prion
•added 2023/11/15 10:15 p.m.•32 views

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

5CVSS7AI score0.00851EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
•added 2023/11/15 7:30 a.m.•38 views

Buffer Overflow

free5gc is vulnerable to Buffer Overflow. The vulnerability allows an attacker to submit crafted PFCP messages resulting in a buffer overflow, potentially leading to Denial of Service...

7.5CVSS7.1AI score0.00782EPSS
SaveExploits1References3Affected Software3
Vulnrichment
Vulnrichment
•added 2023/11/15 12:00 a.m.•21 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

6.7AI score0.00851EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2023/11/15 12:00 a.m.•39 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5AI score0.00851EPSS
SaveExploits1References1
Rows per page
Query Builder