PT-2026-26184 · Free5Gc · Free5Gc

Zfei10990-Cmd

·

Publicado

2026-03-18

·

Atualizado

2026-03-27

·

CVE-2026-33062

CVSS v4.0

8.7

Alta

VetorAV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions free5GC versions prior to 1.4.2
Description This issue is an Improper Input Validation leading to Denial of Service in free5GC NRF. All deployments of free5GC using the NRF discovery service are affected. The EncodeGroupId function attempts to access array indices [0],[1],[2] without validating the length of the split data. When the group-id-list parameter contains insufficient separator characters in an HTTP GET request, the code panics with an "index out of range" error. A remote attacker can cause the NRF service to panic and crash by sending a crafted HTTP GET request with a malformed group-id-list parameter, resulting in a complete denial of service for the NRF discovery service. The API endpoint involved is the NRF API.
Recommendations free5GC versions prior to 1.4.2: Apply the provided patch or restrict access to the NRF API to trusted sources only.

Exploit

Correção

DoS

Improper Access Control

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

CVE-2026-33062
GHSA-7C47-XR7Q-P6HG
GO-2026-4756
SUSE-SU-2026:1135-1

Produtos afetados

Free5Gc