CVE-2023-50019

MediumCVSS 5.9/10Last modified Jun 17, 2026

Description

An issue was discovered in open5gs v2.6.6. InitialUEMessage, Registration request sent at a specific time can crash AMF due to incorrect error handling of Nudm_UECM_Registration response.

Metrics

CVSS 3.1 5.9/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755 CWE-400

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/open5gs/open5gs/commit/7278714133422cee46c32c7523f81ec2cecad9e2Patch
https://github.com/open5gs/open5gs/issues/2733Exploit, Issue Tracking, Patch, Vendor Advisory
https://github.com/open5gs/open5gs/commit/7278714133422cee46c32c7523f81ec2cecad9e2Patch
https://github.com/open5gs/open5gs/issues/2733Exploit, Issue Tracking, Patch, Vendor Advisory

Timeline

Published: Jan 2, 2024
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-50028.8A flaw was found in pgAdmin. This issue occurs when the pgAdmin server HTTP API validates the path a user selects to external PostgreSQL uti CVE-2023-500207.5An issue was discovered in open5gs v2.6.6. SIGPIPE can be used to crash AMF.CVE-2023-500269.8SQL injection vulnerability in Presta Monster "Multi Accessories Pro" (hsmultiaccessoriespro) module for PrestaShop versions 5.1.1 and befor CVE-2023-500279.8SQL Injection vulnerability in Buy Addons baproductzoommagnifier module for PrestaShop versions 1.0.16 and before, allows remote attackers t CVE-2023-500289.8In the module "Sliding cart block" (blockslidingcart) up to version 2.3.8 from PrestashopModules.eu for PrestaShop, a guest can perform SQL CVE-2023-5002910.0PHP Injection vulnerability in the module "M4 PDF Extensions" (m4pdf) up to version 3.3.2 from PrestaAddons for PrestaShop allows attackers CVE-2023-50037.5The Active Directory Integration / LDAP Integration WordPress plugin before 4.1.10 stores sensitive LDAP logs in a buffer file when an admin CVE-2023-500309.8In the module "Jms Setting" (jmssetting) from Joommasters for PrestaShop, a guest can perform SQL injection in versions <= 1.1.0. The method CVE-2023-500359.8PHPGurukul Small CRM 3.0 is vulnerable to SQL Injection on the Users login panel because of "password" parameter is directly used in the SQL CVE-2023-500388.8There is an arbitrary file upload vulnerability in the background of textpattern cms v4.8.8, which leads to the loss of server permissions.CVE-2023-50049.8Hospital management system version 378c157 allows to bypass authentication. This is possible because the application is vulnerable to SQLI.CVE-2023-500449.8Cesanta MJS 2.20.0 has a getprop_builtin_foreign out-of-bounds read if a Built-in API name occurs in a substring of an input string.