5.3 MEDIUM
- CVSS version: 3.1
- Attack vector (AV):
- Attack complexity (AC):
- Privileges required (PR):
- User interaction (UI):
- Scope (S):
- Confidentiality impact (C):
- Integrity impact (I):
- Availability impact (A):
Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service
A vulnerability has been found in Free5GC SMF up to 4.1.0. Affected by this vulnerability is the function HandlePfcpSessionReportRequest of the file internal/pfcp/handler/handler.go of the component PFCP. The manipulation leads to denial of service. Remote exploitation of the attack is possible. The exploit has been disclosed to the public and may be used. To fix this issue, it is recommended to deploy a patch.
References
- VDB-343476 | Free5GC SMF PFCP handler.go HandlePfcpSessionReportRequest denial of service vdb-entry technical-description
- VDB-343476 | CTI Indicators (IOB, IOC, TTP, IOA) signature permissions-required
- Submit #739653 | free5gc SMF v4.1.0 Denial of Service third-party-advisory
- Submit #739654 | free5gc SMF v4.1.0 Denial of Service (Duplicate) third-party-advisory
- https://github.com/free5gc/free5gc/issues/804 issue-tracking
- https://github.com/free5gc/free5gc/issues/804#issue-3816086696 issue-tracking exploit
- https://github.com/free5gc/smf/pull/188 issue-tracking patch
Affected products
- ==4.1.0
- ==4.0
Matching in nixpkgs
pkgs.smfh
Sleek Manifest File Handler
pkgs.asmfmt
Go assembler formatter
pkgs.libsmf
C library for reading and writing Standard MIDI Files
pkgs.nasmfmt
Formatter for NASM source files
-
nixos-unstable 2022-09-15
- nixpkgs-unstable 2022-09-15
- nixos-unstable-small 2022-09-15
pkgs.mt32emu-smf2wav
Produces a WAVE file from a Standard MIDI file (SMF)
-
nixos-unstable smf2wav-1.9.0
- nixpkgs-unstable smf2wav-1.9.0
- nixos-unstable-small smf2wav-1.9.0
pkgs.tests.fetchgit.rootDir
None
-
nixos-unstable qbp2smfq2pd7
- nixpkgs-unstable qbp2smfq2pd7
pkgs.python312Packages.pysmf
Python extension module for reading and writing Standard MIDI Files, based on libsmf
pkgs.python313Packages.pysmf
Python extension module for reading and writing Standard MIDI Files, based on libsmf
Package maintainers
-
@kalbasit Wael Nasreddine <wael.nasreddine@gmail.com>
-
@OPNA2608 Cosima Neidahl <opna2608@protonmail.com>
-
@arthsmn Arthur Cerqueira
-
@Gerg-L Greg Leyda <gregleyda@proton.me>