free5gc Vulnerability Advisory Catalog

Total 82 security vulnerabilities recorded for free5gc software and firmware.

← Back to All Vendors
Component: free5gc

An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF compone...

📅 2023-12-22
CVSS 7.5 Dossier →
Component: free5gc

An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component....

📅 2023-11-16
CVSS 5.5 Dossier →
Component: free5gc

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutate...

📅 2023-11-15
CVSS 7.5 Dossier →
Component: free5gc

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat me...

📅 2023-11-15
CVSS 7.5 Dossier →
Component: free5gc

Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages....

📅 2023-11-13
CVSS 7.5 Dossier →
Component: udm

pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via a...

📅 2023-10-23
CVSS 7.5 Dossier →
CVE-2023-4659 CRITICAL
Component: free5gc

Cross-Site Request Forgery vulnerability, whose exploitation could allow an attacker to perform different actions on the platform as an administrator,...

📅 2023-10-02
CVSS 9.8 Dossier →
Component: free5gc

In Free5gc v3.0.5, the AMF breaks due to malformed NAS messages....

📅 2022-11-18
CVSS 7.5 Dossier →
Component: free5gc

Free5gc v3.2.1 is vulnerable to Information disclosure....

📅 2022-10-25
CVSS 7.5 Dossier →
Component: free5gc

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString....

📅 2022-10-24
CVSS 5.5 Dossier →
Page 4 of 4 (82 Total Records)