CVE-2023-47345: Buffer Overflow

Q: What is CVE-2023-47345?

CVE-2023-47345 is a buffer overflow vulnerability in free5gc 3.3.0 that allows attackers to cause a denial of service by sending a crafted PFCP message with a malformed PFCP Heartbeat message.

Q: How does CVE-2023-47345 impact the affected software?

CVE-2023-47345 can cause a denial of service in free5gc 3.3.0.

Q: What is the severity of CVE-2023-47345?

The severity of CVE-2023-47345 is not specified.

Q: How can I fix CVE-2023-47345?

There is currently no known fix for CVE-2023-47345. It is recommended to update to a fixed version of the software when it becomes available.

Q: Where can I find more information about CVE-2023-47345?

You can find more information about CVE-2023-47345 on the NIST NVD website and the GitHub repository for free5gc.

Published Nov 15, 2023

Updated

Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero.

Affected Software

2 affected components

go/github.com/free5gc/free5gc<=3.3.0

free5gc Free5gc=3.3.0

Event History

Nov 15, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Nov 16, 2023

Advisory Published

12:30 AM

Frequently Asked Questions

What is CVE-2023-47345?

CVE-2023-47345 is a buffer overflow vulnerability in free5gc 3.3.0 that allows attackers to cause a denial of service by sending a crafted PFCP message with a malformed PFCP Heartbeat message.

How does CVE-2023-47345 impact the affected software?

CVE-2023-47345 can cause a denial of service in free5gc 3.3.0.

What is the severity of CVE-2023-47345?