Ecosyste.ms: Advisories

An open API service providing security vulnerability metadata for many open source software ecosystems.

Security Advisories: GSA_kwCzR0hTQS01OWhqLTYyZjUtZmdtY84AAvg6

free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.

Permalink: https://github.com/advisories/GHSA-59hj-62f5-fgmc
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS01OWhqLTYyZjUtZmdtY84AAvg6
Source: GitHub Advisory Database
Origin: Unspecified
Severity: Moderate
Classification: General
Published: 11 months ago
Updated: 8 months ago

CVSS Score: 5.5
CVSS vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

Identifiers: GHSA-59hj-62f5-fgmc, CVE-2022-43677
References:

Versions: <= 3.2.1
No known fixed version