NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST in github.com/free5gc/nssf
NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST in github.com/free5gc/nssf
02 / AFFECTED SOFTWARE
Affected packages
4 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API.
NSSF panic due to nil pointer dereference when expiry field is omitted in NSSAIAvailability POST in github.com/free5gc/nssf
An issue was discovered in Free5GC v4.0.0 and v4.0.1 allowing an attacker to cause a denial of service via crafted POST request to the Nnssf_NSSAIAvailability API.
05 / REFERENCES
Further evidence
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/60xxx/CVE-2025-60638.json
- https://github.com/free5gc/free5gc
- https://github.com/free5gc/free5gc/issues/704
- https://nvd.nist.gov/vuln/detail/CVE-2025-60638
- https://github.com/advisories/GHSA-f2hj-vpp9-6vm2
- https://github.com/free5gc/nssf/commit/66fc727a894fa821fde14030346b18de69192204
- https://github.com/free5gc/nssf