CVE-2023-4883 - Multiple vulnerabilities in Open5GS

Back Back to CVE browser

HIGH

Multiple vulnerabilities in Open5GS

Published Oct 3, 2023

7.5

HIGH

CVSS 3.1

EPSS 0.62%

Description

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage.

Affected products

Vendor Open5GS Product Open5GS Default
unaffected
Affected
- 2.4.10 and prior

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Open5GS	Open5GS	unaffected	Affected 2.4.10 and prior

Remediation

Vendor solution

Open5GS is working on a fix for the reported vulnerabilities.

Weaknesses (1)

CWE-763

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54722
Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs
Third Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-54722		Advisory
https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-open5gs		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner INCIBE

Published Oct 3, 2023

Updated Sep 19, 2024

Reserved Sep 11, 2023

Link CVE-2023-4883

CISA Vulnrichment

Updated Sep 19, 2024

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2023-4883

Red Hat

No data

ENISA EUVD

Assigner INCIBE

Published Oct 3, 2023

Updated Sep 19, 2024

Link EUVD-2023-54722

GitHub

No data