CVE-2023-46324
1 advisory.
Go/github.com/free5gc/udm CVE-2023-46324: high 7.5, EPSS 0.41%
free5GC udm vulnerable to Invalid Curve Attack
Action: Upgrade github.com/free5gc/udm to 1.2.0 or later.
go get github.com/free5gc/udm@v1.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.2.0 | - |
Fixed versions
| 1.2.0 |
Sources
- osv: GHSA-cqvv-r3g3-26rf
- https://nvd.nist.gov/vuln/detail/CVE-2023-46324
- https://github.com/free5gc/udm/pull/20
- https://github.com/free5gc/udm/commit/5e1479cc686f058992557669b13fd3761a1b6024
- https://github.com/free5gc/udm
- https://github.com/free5gc/udm/compare/v1.1.1...v1.2.0
- https://www.gsma.com/security/wp-content/uploads/2023/10/0073-invalid_curve.pdf
CVE-2023-46324 · published · modified · JSON