What is GHSA-6944-6pmv-6mp2?

GHSA-6944-6pmv-6mp2 is a security advisory published by GitHub Security Advisories with High severity. free5gc Buffer Overflow vulnerability

Which CVE IDs does GHSA-6944-6pmv-6mp2 cover?

GHSA-6944-6pmv-6mp2 covers the following CVE IDs: CVE-2023-47345. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-6944-6pmv-6mp2?

GHSA-6944-6pmv-6mp2 has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-6944-6pmv-6mp2?

GHSA-6944-6pmv-6mp2 affects 1 product, including: go/github.com/free5gc/free5gc:\u003c= 3.3.0.

GHSA-6944-6pmv-6mp2HighCVSS 7.5

free5gc Buffer Overflow vulnerability

Vendor

GitHub Security Advisories

Published

November 16, 2023

Last Modified

November 21, 2023

🔗 CVE IDs covered (1)

CVE-2023-47345 →

📋 Description

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.

🎯 Affected products1

go/github.com/free5gc/free5gc:<= 3.3.0

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2023-47345
https://github.com/free5gc/free5gc/issues/483
https://github.com/advisories/GHSA-6944-6pmv-6mp2