Free5gc vulnerable to uncontrolled resource consumption

Description

References

• nvd.nist.gov/vuln/detail/CVE-2022-38871 · ADVISORY
• free5gc/free5gc · WEB
• free5gc/free5gc · PACKAGE

More vulnerabilities in github.com/free5gc/free5gc

• CVE-2026-55068CRITICAL 9.3free5GC is an open-source implementation of the 5G core network. In 4.2.2 and earlier, the NRF RegisterNFInstance handler at PUT /nnrf-nfm/v…
• CVE-2026-53551MEDIUM 6.9free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not …
• CVE-2023-47025MEDIUM 5.5An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.
• CVE-2023-47345HIGH 7.5Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP He…
• CVE-2022-43677MEDIUM 5.5In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.