Detections
Analytics
SCA: security update for github.com/free5gc/udr (GHSA-4rqf-grm6-vf75)
medium Tenable Self-Hosted Container Security Plugin ID 441577
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- free5GC is an open-source implementation of the 5G core network. Prior to 4.2.2, free5GC's UDR nudr-dr
DELETE /subscription-data/{ueId}/{servingPlmnId}/ee-subscriptions/{subsId}/amf-subscriptions handler
contains a nil-pointer dereference reachable from a single authenticated request, after one preparatory
authenticated EE-subscription create. The handler checks _, ok =
UESubsData.EeSubscriptionCollection[subsId] and sets a 404 problem-details on the miss path, but then
continues to UESubsData.EeSubscriptionCollection[subsId].AmfSubscriptionInfos -- dereferencing the same
missing entry instead of returning. Gin recovery converts the panic into HTTP 500, but the endpoint
remains repeatedly panicable. This vulnerability is fixed in 4.2.2. (CVE-2026-44323)
Solution
Update the github.com/free5gc/udr library and its related packages to version 1.4.3 or later.See Also
Plugin Details
Severity: Medium
ID: 441577
Version: Revision 1.5
Type: Local
Family: SCA Checks
Published: 5/9/2026
Updated: 6/1/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 5
Percentile: 94.36
Vendor
Vendor Severity: Medium
CVSS v2
Risk Factor: Medium
Base Score: 6.8
Temporal Score: 5.3
Vector: CVSS2#AV:N/AC:L/Au:S/C:N/I:N/A:C
CVSS Score Source: CVE-2026-44323
CVSS v3
Risk Factor: Medium
Base Score: 6.5
Temporal Score: 5.9
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
Temporal Vector: CVSS:3.0/E:P/RL:O/RC:C
Vulnerability Information
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 5/8/2026
Vulnerability Publication Date: 5/8/2026
Reference Information
CVE: CVE-2026-44323
cwe: CWE-476