CVE-2022-38871

CVE-2022-38871 affects Free5gc v3.0.5, where the AMF can break due to malformed NAS messages. The issue is limited to the AMF component and is described with a high impact on availability (CVE score 7.5, network attack vector, no privileges required). The provided documents consistently describe ...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

CVE-2022-38871

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...

GO-2022-1083 Panic on malformed messages in github.com/free5gc/aper

A malformed message can crash the free5gc/amf and free5gc/ngap decoders via an index-out-of-range panic in aper.GetBitString...

free5GC Denial of Service Vulnerability

free5GC is a 5th Generation 5G mobile core network open source project by free5GC. free5GC version 3.2.1 suffers from a denial of service vulnerability. The vulnerability stems from the program's failure to properly come out with the wrong NGAP message, which is exploited by attackers to crash th...

Denial Of Service (DoS)

github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...

GHSA-59HJ-62F5-FGMC free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

Design/Logic Flaw

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString...

CVE-2022-43677

The CVE-2022-43677 issue affects free5GC version 3.2.1, where a malformed NGAP message can trigger an index-out-of-range panic in aper.GetBitString, crashing both the AMF and NGAP decoders. The vulnerability stems from processing NGAP messages in the free5GC stack, leading to a denial of service ...

Open5GS Denial of Service Vulnerability (CNVD-2025-18589)

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which originates from the amfgnbfindbyaddr function in /src/amf/amf-context.c that only detects the Ip address and does not detect if it i...

CVE-2022-40890

A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...

Denial of service

A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...

CVE-2022-40890

A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...

CVE-2022-40890

Open5GS 2.4.10 and earlier has a vulnerability in /src/amf/amf-context.c that leads to an AMF denial of service. The CVE entry and multiple connected sources confirm the affected component and impact. PT-2022-25612 notes there is no information about a fixed version in newer releases, but no expl...

CVE-2022-40890

A vulnerability in /src/amf/amf-context.c in Open5GS 2.4.10 and earlier leads to AMF denial of service...

Open5GS 安全漏洞

Open5GS is an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. A denial of service vulnerability exists in Open5GS, which originates from the amfgnbfindbyaddr function in /src/amf/amf-context.c that only detects the Ip address and does not detect if it i...

PT-2022-25612 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS versions 2.4.10 and earlier Description: A vulnerability in the /src/amf/amf-context.c file leads to an AMF denial of service. Recommendations: For Open5GS versions 2.4.10 and earlier, at the moment, there is no information about a...

CVE-2022-3299

A vulnerability was found in Open5GS up to 2.4.10. It has been declared as problematic. Affected by this vulnerability is an unknown functionality in the library lib/sbi/client.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. The name of th...