Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/ausf

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low 3.7
    CVE-2026-55785

    free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

    free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedu…

    free5gc free5gc github.com/free5gc/ausf Go
  • High 7.5
    CVE-2026-55784

    free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI

    free5GC is an open-source implementation of the 5G core network. In version 1.4.4 and earlier, the AUSF component stores per-subscriber authentication state in a global sync.Map named AUSFContext.UePool in internal/context/context.go, keyed only by SUPI. Ever…

    free5gc free5gc github.com/free5gc/ausf Go
  • Medium 6.9
    CVE-2026-53551

    free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure

    free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOrSuci field in UE authentication requests. Null bytes (\x00) and other control characters pass throug…

    free5gc free5gc ausf github.com/free5gc/free5gc Go
  • High 8.7
    CVE-2026-33063

    free5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface Conversion

    free5GC is an open source 5G core network. free5GC AUSF prior to version 1.4.2 has is an Improper Null Check vulnerability leading to Denial of Service. All deployments of free5GC v4.0.1 using the AUSF UE authentication service (`/nausf-auth/v1/ue-authenticat…

    free5gc ausf github.com/free5gc/ausf Go