Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/amf

5 known vulnerabilities.

3 results · Clear filters · Feed

  • Medium 6.1

    free5GC: UE Security Capability bypass on NGAP PathSwitchRequest

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, the AMF in Free5GC does not verify the UE Security Capabilities received in NGAP PathSwitchRequest messages against its locally stored values, as mandated by 3GPP TS 33.501 §6.7.…

  • Medium 5.5

    free5GC AMF missing default case in Content-Type switch in HTTPUEContextTransfer

    free5GC AMF provides Access & Mobility Management Function (AMF) for free5GC, an an open-source project for 5th generation (5G) mobile core networks. Prior to version 1.4.3, the `HTTPUEContextTransfer` handler in `internal/sbi/api_communication.go` does not i…

  • Medium 5.3

    Free5GC AMF handler.go HandleRegistrationComplete denial of service

    A weakness has been identified in Free5GC 4.1.0. Affected is the function HandleRegistrationComplete of the file internal/gmm/handler.go of the component AMF. Executing a manipulation can lead to denial of service. The attack may be performed from remote. Thi…