CVE-2023-46324
First published: Mon Oct 23 2023(Updated: )
pkg/suci/suci.go in free5GC udm before 1.2.0, when Go before 1.19 is used, allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its private key and the attacker's public key.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| go/github.com/free5gc/udm | <1.2.0 | 1.2.0 |
| All of | ||
| Free5gc Udm | <1.2.0 | |
| Golang Go | <1.19 | |
| Free5gc Udm | <1.2.0 | |
| Golang Go | <1.19 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://nvd.nist.gov/vuln/detail/CVE-2023-46324
- https://github.com/free5gc/udm/pull/20
- https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0
- https://github.com/free5gc/udm/commit/5e1479cc686f058992557669b13fd3761a1b6024
- https://github.com/advisories/GHSA-cqvv-r3g3-26rf (Advisory)
- https://www.gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf
Frequently Asked Questions
What is CVE-2023-46324?
CVE-2023-46324 is a vulnerability in free5GC udm (User Data Management) before version 1.2.0 when using Go before version 1.19.
What is the severity of CVE-2023-46324?
The severity of CVE-2023-46324 is high with a CVSS score of 7.5.
How does CVE-2023-46324 occur?
CVE-2023-46324 occurs in pkg/suci/suci.go in free5GC udm due to the computation of a shared secret using an uncompressed public key that has not been validated.
How can CVE-2023-46324 be exploited?
An attacker can exploit CVE-2023-46324 by sending arbitrary SUCIs (Subscription Concealed Identifier) to the UDM, which attempts to decrypt them using its private key.
How can I fix CVE-2023-46324?
To fix CVE-2023-46324, it is recommended to update to free5GC udm version 1.2.0 and use Go version 1.19 or newer.
- agent/author
- agent/description
- agent/event
- agent/first-publish-date
- agent/last-modified-date
- agent/references
- agent/remedy
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/type
- agent/weakness
- collector/github-advisory
- alias/GHSA-cqvv-r3g3-26rf
- alias/CVE-2023-46324
- collector/github-advisory-latest
- collector/mitre-cve
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- collector/nvd-cve
- package-manager/go
- vendor/free5gc
- canonical/free5gc udm
- vendor/golang
- canonical/golang go