HIGH7.5

GHSA-jcrr-rr6w-8c83

free5GC AMF denial of service vulnerability

Details

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/free5gc/amf

Introduced in: 0

No fixed version published yet for github.com/free5gc/amf (go modules). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-49391[ADVISORY]
https://github.com/free5gc/free5gc/issues/497[WEB]
https://github.com/free5gc/amf/commit/6fc612c35997cf4e8be1e5c86ae2242f04b576a9[WEB]
https://github.com/free5gc/amf[PACKAGE]