Nixpkgs security tracker
by @mweinelt Activity log
- Created suggestion
-
@mweinelt
ignored
16 packages
- amf
- bamf
- amfora
- ramfetch
- cramfsswap
- samfirm-js
- amf-headers
- cramfsprogs
- ArchiSteamFarm
- archisteamfarm
- python312Packages.py3amf
- python313Packages.py3amf
- python314Packages.py3amf
- python312Packages.dissect-cramfs
- python313Packages.dissect-cramfs
- python314Packages.dissect-cramfs
- @mweinelt dismissed
free5GC has Array Index Out of Bounds in AMF Leading to Denial of Service
free5GC is an open-source project for 5th generation (5G) mobile core networks. Versions up to and including 1.4.1 of free5GC's AMF service have a Buffer Overflow vulnerability leading to Denial of Service. Remote unauthenticated attackers can crash the AMF service by sending a specially crafted NAS Registration Request with a malformed 5GS Mobile Identity, causing complete denial of service for the 5G core network. All deployments of free5GC using the AMF component may be affected. Pull request 43 of the free5gc/nas repo contains a fix. No direct workaround is available at the application level. Applying the official patch is recommended.
References
-
https://github.com/free5gc/free5gc/security/advisories/GHSA-h6xc-8vvf-jcjp x_refsource_CONFIRM
-
https://github.com/free5gc/free5gc/issues/747 x_refsource_MISC
-
https://github.com/free5gc/nas/pull/43 x_refsource_MISC
Affected products
- ==<= 1.4.1
Ignored packages (16)
pkgs.amf
AMD's closed source Advanced Media Framework (AMF) driver
-
nixos-unstable 1.4.34-1787253
- nixpkgs-unstable 1.4.34-1787253
- nixos-unstable-small 1.4.34-1787253
pkgs.bamf
Application matching framework
pkgs.amfora
Fancy terminal browser for the Gemini protocol
pkgs.ramfetch
Tool which displays memory information
pkgs.cramfsswap
Swap endianess of a cram filesystem (cramfs)
pkgs.samfirm-js
Program for downloading Samsung firmware
-
nixos-unstable 0.3.0-unstable-2023-12-27
- nixpkgs-unstable 0.3.0-unstable-2023-12-27
- nixos-unstable-small 0.3.0-unstable-2023-12-27
pkgs.amf-headers
Headers for The Advanced Media Framework (AMF)
pkgs.cramfsprogs
Tools to create, check, and extract content of CramFs images
-
nixos-unstable 2.1-unstable-2025-01-27
- nixpkgs-unstable 2.1-unstable-2025-01-27
- nixos-unstable-small 2.1-unstable-2025-01-27
pkgs.ArchiSteamFarm
Application with primary purpose of idling Steam cards from multiple accounts simultaneously
pkgs.archisteamfarm
Application with primary purpose of idling Steam cards from multiple accounts simultaneously
pkgs.python312Packages.py3amf
None
pkgs.python313Packages.py3amf
Action Message Format (AMF) support for Python 3
-
nixos-unstable py3amf-0.8.11
- nixpkgs-unstable py3amf-0.8.11
- nixos-unstable-small py3amf-0.8.11
pkgs.python314Packages.py3amf
Action Message Format (AMF) support for Python 3
-
nixos-unstable py3amf-0.8.11
- nixpkgs-unstable py3amf-0.8.11
- nixos-unstable-small py3amf-0.8.11
pkgs.python312Packages.dissect-cramfs
None
pkgs.python313Packages.dissect-cramfs
Dissect module implementing a parser for the CRAMFS file system
pkgs.python314Packages.dissect-cramfs
Dissect module implementing a parser for the CRAMFS file system