CVE-2022-38871 - In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages

HIGH

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages

Published Nov 18, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.77%

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages.

Ecosystem	Package	Introduced	Fixed
Go	github.com/free5gc/free5gc	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-400

Uncontrolled Resource Consumption

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-7382		Advisory
https://github.com/advisories/GHSA-m74x-fxjh-3qh9		Advisory
https://github.com/free5gc/free5gc/issues/198		ExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2022-38871