PT-2023-29960 · Free5Gc · Free5Gc

Govulnbot · Publicado 2023-10-22 · Atualizado 2024-01-09 · CVE-2023-46324

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions free5GC udm versions prior to 1.2.0

Description The issue allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its private key and the attacker's public key.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the suci.go module in pkg/suci to minimize the risk of exploitation. Avoid using uncompressed public keys in the affected UDM until the issue is resolved.

Correção

Improper Verification of Cryptographic Signature

Use of a Broken Cryptographic Algorithm

Enumeração de Fraquezas

CWE-347

CWE-327

Identificadores relacionados

CVE-2023-46324

GHSA-CQVV-R3G3-26RF

Produtos afetados

Free5Gc

Referências · 11

• https://github.com/free5gc/udm · Nota
• https://github.com/free5gc/udm/pull/20 · Correção
• https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0 · Nota
• https://github.com/free5gc/udm/commit/5e1479cc686f058992557669b13fd3761a1b6024 · Nota
• https://gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf · Nota
• https://osv.dev/vulnerability/CVE-2023-46324 · Aviso do Fabricante
• https://t.me/cvenotify/66736 · Publicação no Telegram
• https://osv.dev/vulnerability/GHSA-cqvv-r3g3-26rf · Aviso do Fabricante
• https://twitter.com/CVEnew/status/1716273703158173787 · Publicação no Twitter
• https://nvd.nist.gov/vuln/detail/CVE-2023-46324 · Nota de Segurança
• https://twitter.com/VulmonFeeds/status/1716327502879072679 · Publicação no Twitter