SIGPIPE Vulnerability in Open5GS AMF Component by Open5GS
CVE-2023-50020

7.5HIGH

Key Information:

Vendor

Open5GS

Status
Open5gs
Vendor
CVE Published:
2 January 2024

What is CVE-2023-50020?

An issue in Open5GS version 2.6.6 has been identified that enables SIGPIPE to crash the Access and Mobility Management Function (AMF). This vulnerability poses risks to service stability and can be exploited to disrupt network communications. Organizations using affected versions should take prompt action to mitigate potential disruptions.

References

https://github.com/open5gs/open5gs/issues/2734
https://github.com/open5gs/open5gs/commit/1aba814938e3a1b...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2023-50020 : SIGPIPE Vulnerability in Open5GS AMF Component by Open5GS