GHSA-6944-6pmv-6mp2

ghsaUSosv

free5gc Buffer Overflow vulnerability

view advisory published 2023-11-16Licence: CC-BY-4.0

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-47345US	high7.5	0.85% (58th)	—	2023-11-15
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stam…

references

External citations — patches, advisories, analysis.

https://github.com/free5gc/free5gcPACKAGE
https://github.com/free5gc/free5gc/issues/483WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-47345ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan