Executive brief
Free5gc vulnerable to uncontrolled resource consumption
Affected products
- Go github.com/free5gc/free5gc
Junglewise Threat Intelligence
CVE-2022-38871: Free5gc vulnerable to uncontrolled resource consumption
CVE-2022-38871 · Severity: low · CVSS 3.1 · Published 2022-11-19
Technologies: github.com/free5gc/free5gc (Go). Vendors: Go.
Related threats
- free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v
- free5gc AUSF improper input validation in supiOrSuci field
- Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component
- free5gc Buffer Overflow vulnerability
- GO-2022-1083 - Panic on malformed messages in github.com/free5gc/aper