Executive brief
Panic on malformed messages in github.com/free5gc/aper
Affected products
- Go github.com/free5gc/free5gc
- Go github.com/free5gc/aper
Junglewise Threat Intelligence
CVE-2022-43677: GO-2022-1083 - Panic on malformed messages in github.com/free5gc/aper
CVE-2022-43677 · Severity: low · CVSS 3.1 · Published 2022-11-02
Technologies: github.com/free5gc/free5gc (Go). Vendors: Go.
Related threats
- free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v
- free5gc AUSF improper input validation in supiOrSuci field
- Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component
- free5gc Buffer Overflow vulnerability
- Free5gc vulnerable to uncontrolled resource consumption