Vulnerabilities (CVE)

Filtered by vendor Free5gc Subscribe
Total 8 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2023-49391 1 Free5gc 1 Free5gc 2024-09-12 N/A 7.5 HIGH
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.
CVE-2023-47347 1 Free5gc 1 Free5gc 2024-02-05 N/A 7.5 HIGH
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes.
CVE-2023-47345 1 Free5gc 1 Free5gc 2024-02-05 N/A 7.5 HIGH
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.
CVE-2023-47025 1 Free5gc 1 Free5gc 2024-02-05 N/A 5.5 MEDIUM
An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.
CVE-2023-47346 1 Free5gc 3 Free5gc, Smf, Upf 2024-02-05 N/A 7.5 HIGH
Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages.
CVE-2022-38871 1 Free5gc 1 Free5gc 2024-02-04 N/A 7.5 HIGH
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.
CVE-2022-43677 1 Free5gc 1 Free5gc 2024-02-04 N/A 5.5 MEDIUM
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.
CVE-2022-38870 1 Free5gc 1 Free5gc 2024-02-04 N/A 7.5 HIGH
Free5gc v3.2.1 is vulnerable to Information disclosure.