Lucene search
+L

196 matches found

OSV
OSV
added 2025/01/31 12:15 p.m.4 views

DEBIAN-CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

5.5CVSS5.5AI score0.00187EPSS
SaveExploits0References1
OSV
OSV
added 2025/01/31 12:15 p.m.6 views

UBUNTU-CVE-2025-21677

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS6.6AI score0.00187EPSS
SaveExploits0References7
Cvelist
Cvelist
added 2025/01/31 11:25 a.m.28 views

CVE-2025-21677 pfcp: Destroy device along with udp socket's netns dismantle.

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS0.00187EPSS
SaveExploits0References2
OSV
OSV
added 2025/01/31 11:25 a.m.17 views

CVE-2025-21677 pfcp: Destroy device along with udp socket's netns dismantle.

In the Linux kernel, the following vulnerability has been resolved: pfcp: Destroy device along with udp socket's netns dismantle. pfcpnewlink links the device to a list in devnetdev instead of net, where a udp tunnel socket is created. Even when net is removed, the device stays alive on devnetdev...

7.8CVSS5.8AI score
SaveExploits0References5
CVE
CVE
added 2025/01/31 11:25 a.m.133 views

CVE-2025-21677

CVE-2025-21677 describes a Linux kernel PFCP issue where the device is destroyed along with the UDP socket’s netns. The root cause is that pfcp_newlink() links the PFCP device to dev_net(dev) rather than the socket’s netns, so removing netns ns1 can leave the device alive in dev_net(dev) and trig...

7.8CVSS6.9AI score0.00187EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2024/07/16 12:00 a.m.16 views

CVE-2024-40129

Open5GS v2.6.4 is vulnerable to Buffer Overflow. via /lib/pfcp/context.c...

8.6CVSS6.8AI score
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2024/07/16 12:00 a.m.8 views

PT-2024-28790 · Open5Gs · Open5Gs

Name of the Vulnerable Software and Affected Versions: Open5GS version 2.6.4 Description: The issue is related to a Buffer Overflow. It affects the /lib/pfcp/context.c file. Recommendations: For Open5GS version 2.6.4, consider restricting access to the vulnerable file /lib/pfcp/context.c to...

9.8CVSS6.9AI score0.00456EPSS
SaveExploits1References7
OSV
OSV
added 2024/06/06 12:28 p.m.7 views

CGA-PFCP-4VFR-FM8Q

Bulletin has no description...

7.2AI score
SaveExploits0
Veracode
Veracode
added 2023/11/17 9:25 a.m.34 views

Buffer Overflow

github.com/wmnsk/go-pfcp is vulnerable to Buffer Overflow. The vulnerability exists due to a lack of sanitization in the handling of PFCP Heartbeat messages, which allow to attacker to craft a malformed PFCP Heartbeat message with a mutated IE recovery time stamp...

7.5CVSS7AI score0.00851EPSS
SaveExploits1References2Affected Software1
Github Security Blog
Github Security Blog
added 2023/11/16 12:30 a.m.38 views

free5gc Buffer Overflow vulnerability

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS7.1AI score0.00851EPSS
SaveExploits1References3Affected Software1
OSV
OSV
added 2023/11/16 12:30 a.m.37 views

GHSA-6944-6PMV-6MP2 free5gc Buffer Overflow vulnerability

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS7.3AI score0.00851EPSS
SaveExploits1References3
NVD
NVD
added 2023/11/15 10:15 p.m.33 views

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

7.5CVSS0.00742EPSS
SaveExploits1References1
NVD
NVD
added 2023/11/15 10:15 p.m.25 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5CVSS0.00851EPSS
SaveExploits1References1
Prion
Prion
added 2023/11/15 10:15 p.m.23 views

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

5CVSS7.2AI score0.00742EPSS
SaveExploits1References1Affected Software1
Prion
Prion
added 2023/11/15 10:15 p.m.30 views

Buffer overflow

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

5CVSS7AI score0.00851EPSS
SaveExploits1References1Affected Software1
Veracode
Veracode
added 2023/11/15 7:30 a.m.37 views

Buffer Overflow

free5gc is vulnerable to Buffer Overflow. The vulnerability allows an attacker to submit crafted PFCP messages resulting in a buffer overflow, potentially leading to Denial of Service...

7.5CVSS7.1AI score0.00782EPSS
SaveExploits1References3Affected Software3
Cvelist
Cvelist
added 2023/11/15 12:00 a.m.38 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

7.5AI score0.00851EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
added 2023/11/15 12:00 a.m.21 views

CVE-2023-47345

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero...

6.7AI score0.00851EPSS
SaveExploits1References1
Cvelist
Cvelist
added 2023/11/15 12:00 a.m.32 views

CVE-2023-47347

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes...

7.7AI score0.00742EPSS
SaveExploits1References1
CVE
CVE
added 2023/11/15 12:00 a.m.94 views

CVE-2023-47345

The CVE-2023-47345 vulnerability affects free5gc 3.3.0, caused by a Buffer Overflow in PFCP Heartbeat handling when a Recovery Time Stamp IE length is mutated to zero. This permits a crafted PFCP message to trigger a denial of service. No remediation details are provided in the connected document...

7.5CVSS7.3AI score0.00851EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder