810 matches found
PT-2023-30105 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: Free5Gc affected versions not specified Description: The issue is related to a Cross-Site Request Forgery vulnerability. This vulnerability could allow an attacker to perform different actions on the platform as an administrator by changing t...
Free5gc vulnerable to uncontrolled resource consumption
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
GHSA-M74X-FXJH-3QH9 Free5gc vulnerable to uncontrolled resource consumption
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
CVE-2022-38871
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
Design/Logic Flaw
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
CVE-2022-38871
CVE-2022-38871 affects Free5gc v3.0.5, where the AMF can break due to malformed NAS messages. The issue is limited to the AMF component and is described with a high impact on availability (CVE score 7.5, network attack vector, no privileges required). The provided documents consistently describe ...
CVE-2022-38871
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
CVE-2022-38871
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
PT-2022-24601 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: Free5gc version 3.0.5 Description: The issue arises due to malformed NAS messages, causing the AMF to break. Recommendations: For Free5gc version 3.0.5, consider implementing input validation to handle malformed NAS messages properly until a...
CVE-2022-38871
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages...
GO-2022-1083 Panic on malformed messages in github.com/free5gc/aper
A malformed message can crash the free5gc/amf and free5gc/ngap decoders via an index-out-of-range panic in aper.GetBitString...
free5GC Denial of Service Vulnerability
free5GC is a 5th Generation 5G mobile core network open source project by free5GC. free5GC version 3.2.1 suffers from a denial of service vulnerability. The vulnerability stems from the program's failure to properly come out with the wrong NGAP message, which is exploited by attackers to crash th...
CVE-2022-38870
Free5gc v3.2.1 is vulnerable to Information disclosure...
Information disclosure
Free5gc v3.2.1 is vulnerable to Information disclosure...
Denial Of Service (DoS)
github.com/free5gc/free5gc is vulnerable to denial of service. The vulnerability exists due to a index-out-of-range panic in aper.GetBitString, allowing an attacker to crash the application through the AMF and NGAP decoders by providing a maliciously crafted NGAP message...
CVE-2022-38870
CVE-2022-38870 affects Free5gc 3.2.1, where an information disclosure vulnerability exists. The connected nuclei template describes the issue as susceptible to information disclosure, with an attacker possibly obtaining sensitive information, and potentially modifying data or performing unauthori...
CVE-2022-38870
Free5gc v3.2.1 is vulnerable to Information disclosure...
CVE-2022-38870
Free5gc v3.2.1 is vulnerable to Information disclosure...
PT-2022-7180 · Free5Gc · Free5Gc
Name of the Vulnerable Software and Affected Versions: Free5gc version 3.2.1 Description: The issue is related to information disclosure due to a lack of authentication for a critical function in the free5GC software, which is used for organizing 5G mobile network communications. This allows a...