free5gc/amf · Security
free5GC AMF denial of service vulnerability
- GHSA ID
- GHSA-jcrr-rr6w-8c83
- CVE ID
- CVE-2023-49391
- Severity
- high
- Published
- Updated
- CVSS
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS v3
- 7.5 · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Description
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.
CWEs
- CWE-94 · Improper Control of Generation of Code ('Code Injection')