Skip to content
OpenAdvisories

Package · Go

github.com/free5gc/pcf

5 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5

    free5GC: PCF npcf-policyauthorization POST /app-sessions panics on suppFeat=1 with missing AfRoutReq via nil pointer dereference

    free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's PCF POST /npcf-policyauthorization/v1/app-sessions handler panics on a single authenticated request whose ascReqData.suppFeat == "1" (enabling traffic-routing feature n…

  • Medium 6.5

    Free5GC is vulnerable to DoS through its Npcf_BDTPolicyControl POST API

    An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Npcf_BDTPolicyControl API.