CVE-2026-55785

Katalog CVE

CVSS 3.7 · Low EPSS 0,45%

Kerentanan Observable Timing Discrepancy. Skor CVSS 3.1 3.7 (Low) menurut github.com.

Deskripsi (NVD)

free5GC is an open-source implementation of the 5G core network. Prior to 1.4.5, the AUSF component performs cryptographic authentication comparisons in internal/sbi/processor/ue_authentication.go with ordinary equality helpers. Auth5gAkaComfirmRequestProcedure compares RES* and XRES* with strings.EqualFold and logs the expected XRES* value at INFO level before comparison. EapAuthComfirmRequestProcedure compares AT_MAC and XMAC with bytes.Equal and evaluates XRES == RES with ordinary string equality. These comparisons can return at mismatch-dependent times, although testing did not demonstrate a practical remote timing oracle because of HTTP/SBI timing noise. The INFO log exposes authentication material to operators, log collectors, sidecars, or processes able to read AUSF logs. This issue is fixed in version 1.4.5.

Rincian

Terbit di NVD

28 Agustus 2026

Terakhir diubah

8 September 2026

Status NVD

Deferred

CVSS 3.1

3.7 (Low), sumber github.com
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-208: Observable Timing Discrepancy
CWE-385: Covert Timing Channel
CWE-532: Insertion of Sensitive Information into Log File

EPSS (30 hari)

0,45% peluang dieksploitasi; lebih tinggi dari 36,9% CVE lain

Produk dan versi terdampak

NVD belum mencantumkan data produk (CPE) untuk CVE ini. Produk yang terdampak biasanya disebut di deskripsi dan di advisory vendor pada daftar referensi.

Referensi dan perbaikan

• https://github.com/free5gc/ausf/commit/7a5a4aa1ec6cd0e1febebf333911c3104968edf0
• https://github.com/free5gc/ausf/pull/63
• https://github.com/free5gc/ausf/releases/tag/v1.4.5
• https://github.com/free5gc/free5gc/security/advisories/GHSA-fp46-6vfw-gc9c