Tmh23

An issue in the CreateUEContextProcedure function (/v1/ue-contexts/{supi}) of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted PUT request.

A NULL pointer dereference in the AMF NGAP Dispatcher component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via supplying crafted NGAP messages during the initialization of a new RAN connection.

An issue in the CreateUEContext handler component of free5gc v4.1.0 allows attackers to cause a Denial of Service (DoS) via supplying a crafted request.

An issue in the NAS decoder component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted Registration Request message.

An issue in free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) when parsing crafted SUCI data during UE registration.

An issue in the NGAP handler of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted NAS PDU.

**Name of the Vulnerable Software and Affected Versions** free5gc version 4.0.1 **Description** Improper input validation in the `buildFilter()` function (located in processor/processor.go) allows attackers to cause a Denial of Service (DoS), a condition where the system becomes unavailable to its intended users, by providing a crafted input. **Recommendations** As a temporary workaround, consider restricting the use of the `buildFilter()` function until a patch is available.

An issue in the complexQueryFilterSubprocess function in the NRF Discovery service of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

**Name of the Vulnerable Software and Affected Versions** free5gc version 4.0.1 **Description** Improper input validation in the `HandleUpdate()` function located in `/sbi/parameter provision.go` allows attackers to cause a Denial of Service (DoS), a condition where the service becomes unavailable to its intended users, by providing a crafted input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `HandleUpdate()` function to minimize the risk of exploitation.

**Name of the Vulnerable Software and Affected Versions** free5gc version 4.0.1 **Description** A NULL pointer dereference occurs in the UDMC registration handler component. This issue allows attackers to trigger a Denial of Service (DoS) by providing a specially crafted payload. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL, typically leading to a system crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** free5gc version 4.0.1 **Description** A flaw in the `HandleGetSharedData()` function allows an attacker to trigger a Denial of Service (DoS) by providing a specially crafted input. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the `HandleGetSharedData()` function to minimize the risk of exploitation.

An issue in the RechargePut function of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted input.

**Name of the Vulnerable Software and Affected Versions** free5gc version 4.0.1 **Description** A NULL pointer dereference occurs in the CDR processing path, which allows attackers to cause a Denial of Service (DoS) by supplying a crafted payload. A NULL pointer dereference is a condition where a program attempts to read or write to a memory address that is NULL, typically leading to a system crash. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

An issue in the NssaiAvailabilitySubscriptionCreate component of free5gc v4.0.1 allows attackers to cause a Denial of Service (DoS) via a crafted POST request.