VDB
Sign up
—

GO-2026-6328

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA in github.com/free5gc/ausf

Quick fix

GO-2026-6328 — github.com/free5gc/ausf: upgrade to the fixed version with the command below.

go get github.com/free5gc/ausf@v1.4.5

Details

free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA in github.com/free5gc/ausf

Are you affected?

Enter the version of the package you're using.

Affected packages

Go/github.com/free5gc/ausf
Introduced in: 0Fixed in: 1.4.5
Fixgo get github.com/free5gc/ausf@v1.4.5

References