Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/ausf

4 known vulnerabilities.

1 result · Clear filters · Feed

  • Low 3.7

    free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA

    free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedu…