github.com/free5gc/ausf vulnerabilities (Go)
4 vulnerabilities.
-
github.com/free5gc/ausfGo free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA 3.7 Low -
github.com/free5gc/ausfGo free5GC AUSF authentication contexts can be overwritten by concurrent requests for the same SUPI 7.5 High -
github.com/free5gc/ausfGo free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure 6.9 Medium -
github.com/free5gc/ausfGo free5GC AUSF UE Authentication Panic on Nil SuciSupiMap Interface Conversion 8.7 High