CVE-2023-47345

CVSS 3.1 Score 7.5 of 10 (high)

Details

Published Nov 15, 2023
Updated: Nov 21, 2023
CWE ID 120

Summary

CVE-2023-47345 is a Buffer Overflow vulnerability discovered in free5gc 3.3.0. This vulnerability allows attackers to cause a denial of service by sending a crafted PFCP message with a malformed PFCP Heartbeat message, where the Recovery Time Stamp IE length is mutated to zero. The affected product is free5gc version 3.3.0. To remediate this vulnerability, users should upgrade to a patched version or apply relevant security patches provided by the vendor. The potential danger posed by this vulnerability is high, as it can be exploited remotely over the network without requiring any privileges or user interaction, resulting in a denial of service condition for the affected system.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2023-47345 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options