Free5gc: >> Free5gc Security Vulnerabilities
Buffer Overflow vulnerability in Free5gc v.4.0.0 allows a remote attacker to cause a denial of service via the AMF, NGAP, security.go, handler_generated.go, handleInitialUEMessageMain, DecodePlainNasNoIntegrityCheck, GetSecurityHeaderType components
CVSS Score
5.4
EPSS Score
0.004
Published
2025-05-29
An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message.
CVSS Score
7.5
EPSS Score
0.01
Published
2023-12-22
An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.
CVSS Score
5.5
EPSS Score
0.003
Published
2023-11-16
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.
CVSS Score
7.5
EPSS Score
0.009
Published
2023-11-15
Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes.
CVSS Score
7.5
EPSS Score
0.007
Published
2023-11-15
Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages.
CVSS Score
7.5
EPSS Score
0.008
Published
2023-11-13
In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.
CVSS Score
7.5
EPSS Score
0.008
Published
2022-11-18
Free5gc v3.2.1 is vulnerable to Information disclosure.
CVSS Score
7.5
EPSS Score
0.036
Published
2022-10-25
In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.
CVSS Score
5.5
EPSS Score
0.008
Published
2022-10-24
Page 6