Free5GC NF Discovery Denial of Service Vulnerability
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data.
| Vendor | Product | Versions | ||||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Free5gc | Free5gc |
|
No CVSS v4.0
No CVSS v3.0
No CVSS v2
This CVE is not in the KEV list.
Exploit prediction score: < 1% (0.460% probability within 30 days)
| Link | Providers |
|---|---|
| https://github.com/free5gc/free5gc/issues/758 |
|
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Free5GC NF Discovery Denial of Service Vulnerability |
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Denial of Service via Crafted snssais Query in free5gc NF Discovery Endpoint | |
| Weaknesses | CWE-400 |
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-770 | |
| Metrics |
cvssV3_1
|
| Type | Values Removed | Values Added |
|---|---|---|
| Title | Denial of Service via Crafted snssais Query in free5gc NF Discovery Endpoint | |
| First Time appeared |
Free5gc
Free5gc free5gc |
|
| Weaknesses | CWE-400 | |
| Vendors & Products |
Free5gc
Free5gc free5gc |
| Type | Values Removed | Values Added |
|---|---|---|
| Description | An issue in the NF Discovery endpoint of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted snssais query. | |
| References |
|