GCVE - cpe:2.3:a:free5gc:free5gc:3.3.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:free5gc:free5gc:3.3.0:*:*:*:*:*:*:*

part: a version: 3.3.0 update: *

Vendor	Free5Gc (`77fcf67d-849c-57a8-9f49-9d3927749b22`)
Product	Free5Gc (`f2b73a29-83cd-59ab-bdd5-57df499b831c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/free5gc/free5gc`	purl2cpe	2026-06-01 10:14:56.517064

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2023-49391`	vulnerable	2026-06-08 06:14:29.065329	Details available An issue was discovered in free5GC version 3.3.0, allows remote attackers to execute arbitrary code and cause a denial of service (DoS) on AMF component via crafted NGAP message. Published: 2023-12-22T00:00:00.000Z Updated: 2024-09-12T19:32:21.234Z Open on db.gcve.eu Reference links https://github.com/free5gc/free5gc/issues/497	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47347`	vulnerable	2026-06-08 06:14:24.647922	Details available Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP messages whose Sequence Number is mutated to overflow bytes. Published: 2023-11-15T00:00:00.000Z Updated: 2024-08-29T15:29:50.997Z Open on db.gcve.eu Reference links https://github.com/free5gc/free5gc/issues/496	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47346`	vulnerable	2026-06-08 06:14:24.645289	Details available Buffer Overflow vulnerability in free5gc 3.3.0, UPF 1.2.0, and SMF 1.2.0 allows attackers to cause a denial of service via crafted PFCP messages. Published: 2023-11-13T00:00:00.000Z Updated: 2024-09-03T16:12:41.868Z Open on db.gcve.eu Reference links https://github.com/free5gc/free5gc/issues/482	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47345`	vulnerable	2026-06-08 06:14:24.644769	Details available Buffer Overflow vulnerability in free5gc 3.3.0 allows attackers to cause a denial of service via crafted PFCP message with malformed PFCP Heartbeat message whose Recovery Time Stamp IE length is mutated to zero. Published: 2023-11-15T00:00:00.000Z Updated: 2024-08-29T17:06:37.977Z Open on db.gcve.eu Reference links https://github.com/free5gc/free5gc/issues/483	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2023-47025`	vulnerable	2026-06-08 06:14:23.784247	Details available An issue in Free5gc v.3.3.0 allows a local attacker to cause a denial of service via the free5gc-compose component. Published: 2023-11-16T00:00:00.000Z Updated: 2024-08-12T14:14:53.656Z Open on db.gcve.eu Reference links https://github.com/free5gc/free5gc/issues/501	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.