Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2023-49391
CVE-2023-49391:
vulnerability analysis and mitigation
Overview
An issue was discovered in free5GC version 3.3.0 that allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on the AMF (Access and Mobility Management Function) component via crafted NGAP (Next Generation Application Protocol) messages. The vulnerability was disclosed on December 22, 2023, and has been assigned a CVSS v3.1 base score of 7.5 HIGH (NVD).
Technical details
The vulnerability exists in the AMF component's NGAP message handling functionality. When receiving invalid NGAP messages, the AMF crashes due to a runtime error involving an invalid memory address or nil pointer dereference. The issue occurs in the message dispatch functionality, specifically in the handleConnection function of the NGAP service (GitHub Issue).
Impact
The vulnerability can lead to a denial of service condition where the AMF component crashes and becomes unable to restart. This affects the core network functionality as the AMF is responsible for handling mobility management and access control in 5G networks. The impact is particularly severe as the AMF cannot recover without manual intervention (GitHub Issue).
Mitigation and workarounds
At the time of disclosure, no official patch was available. The expected behavior should be to validate NGAP message content and reject malformed messages rather than crashing the service (GitHub Issue).
Additional resources
Source: This report was generated using AI
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management