Skip to content

Free5gc allows a local attacker to cause a denial of service via the free5gc-compose component

High severity GitHub Reviewed Published Nov 17, 2023 to the GitHub Advisory Database • Updated Nov 17, 2023

Package

gomod github.com/free5gc/free5gc (Go)

Affected versions

<= 3.3.0

Patched versions

None

Description

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component.

References

Published by the National Vulnerability Database Nov 16, 2023
Published to the GitHub Advisory Database Nov 17, 2023
Reviewed Nov 17, 2023
Last updated Nov 17, 2023

Severity

High

EPSS score

Exploit Prediction Scoring System (EPSS)

This score estimates the probability of this vulnerability being exploited within the next 30 days. Data provided by FIRST.
(5th percentile)

Weaknesses

CVE ID

CVE-2023-47025

GHSA ID

GHSA-q27h-hw2v-x5jm

Source code

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.