Medium · 5.5 CVE-2022-43677 EUVD-2022-7023GHSA-59hj-62f5-fgmcGO-2022-1083

free5GC vulnerable to malformed NGAP message crashing the AMF and NGAP decoders

Published Oct 24, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

In free5GC 3.2.1, a malformed NGAP message can crash the AMF and NGAP decoders via an index-out-of-range panic in aper.GetBitString.

Ecosystem	Package	Affected	Fixed	Record
Go	github.com/free5gc/aper	all versions	—	GO-2022-1083
Go	github.com/free5gc/free5gc	<= 3.2.1	—	GHSA-59hj-62f5-fgmc