CVE-2023-4883

2023-10-0315:15:40

CWE-763

[email protected]

web.nvd.nist.gov

cve-2023-4883

security

vnf

vulnerability

exploitation

service outage

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

0.0005 Low

EPSS

Percentile

17.1%

JSON

Invalid pointer release vulnerability. Exploitation of this vulnerability could allow an attacker to interrupt the correct operation of the service by sending a specially crafted json string to the VNF (Virtual Network Function), and triggering the ogs_sbi_message_free function, which could cause a service outage.

Affected configurations

Vulners

NVD

Node

open5gsopen5gsRange≤2.4.10 and prior

VendorProductVersionCPE
open5gsopen5gs*cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
open5gs	open5gs	*	cpe:2.3:a:open5gs:open5gs::::::::

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Open5GS",
    "vendor": "Open5GS",
    "versions": [
      {
        "status": "affected",
        "version": "2.4.10 and prior"
      }
    ]
  }
]