CVE-2026-53551— free5GC 输入验证错误漏洞

free5GC AUSF: null byte injection in supiOrSuci causes HTTP 500 internal service failure

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the free5GC AUSF (Authentication Server Function) does not validate the supiOrSuci field in UE authentication requests. Null bytes (\x00) and other control characters pass through JSON parsing unchanged and are forwarded to the UDM in an unescaped URL path. This causes Go's net/url.Parse() to fail, returning HTTP 500 "System failure" and leaking internal stack traces. An unauthenticated attacker can trigger this at scale causing denial of service for all subscribers attempting authentication through the affected AUSF. This vulnerability is fixed in 1.4.5.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

输入验证不恰当

free5GC 输入验证错误漏洞

free5GC是free5GC团队开源的一个第 5 代 (5G) 移动核心网络的项目平台。 free5GC存在输入验证错误漏洞，该漏洞源于未验证UE认证请求中的supiOrSuci字段，空字节和其他控制字符经JSON解析后以未转义URL路径转发至UDM，导致Go的net/url.Parse()失败并泄露内部堆栈信息，未经身份验证的攻击者可大规模触发该漏洞，导致所有通过受影响AUSF认证的用户拒绝服务。

N/A

N/A