PT-2023-29960 · Free5Gc · Free5Gc

Govulnbot · Published 2023-10-22 · Updated 2024-01-09 · CVE-2023-46324

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions free5GC udm versions prior to 1.2.0

Description The issue allows an Invalid Curve Attack because it may compute a shared secret via an uncompressed public key that has not been validated. An attacker can send arbitrary SUCIs to the UDM, which tries to decrypt them via both its private key and the attacker's public key.

Recommendations For versions prior to 1.2.0, update to version 1.2.0 or later to resolve the issue. As a temporary workaround, consider restricting access to the suci.go module in pkg/suci to minimize the risk of exploitation. Avoid using uncompressed public keys in the affected UDM until the issue is resolved.

Fix

Improper Verification of Cryptographic Signature

Use of a Broken Cryptographic Algorithm

Weakness Enumeration

CWE-347

CWE-327

Related Identifiers

CVE-2023-46324

GHSA-CQVV-R3G3-26RF

Affected Products

Free5Gc

References · 11

• https://github.com/free5gc/udm/pull/20 · Patch
• https://osv.dev/vulnerability/CVE-2023-46324 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-cqvv-r3g3-26rf · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-46324 · Security Note
• https://github.com/free5gc/udm · Note
• https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0 · Note
• https://github.com/free5gc/udm/commit/5e1479cc686f058992557669b13fd3761a1b6024 · Note
• https://gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf · Note
• https://t.me/cvenotify/66736 · Telegram Post
• https://twitter.com/CVEnew/status/1716273703158173787 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1716327502879072679 · Twitter Post