CVE-2025-15418 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/t…
Medium CVSS: 4.8

CVE-2025-15418

A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial of service. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is named 4e913d21f2c032b187815f063dbab5ebe65fe83a. To fix this issue, it is recommended to deploy a patch.
Vendor
Open5gs
Product
Open5gs
CWE
CWE-404
Yayın Tarihi
2026-01-02 00:15:43
Güncelleme
2026-02-23 09:16:19
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 Open5gs MEDIUM Open5gs 2026

Referanslar

https://github.com/open5gs/open5gs/ https://github.com/open5gs/open5gs/commit/4e913d21f2c032b187815f063dbab5ebe65fe83a https://github.com/open5gs/open5gs/issues/4217 https://github.com/open5gs/open5gs/issues/4217#issue-3759615968 https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105 https://vuldb.com/?ctiid.339340 https://vuldb.com/?id.339340 https://vuldb.com/?submit.728043 https://github.com/open5gs/open5gs/issues/4217 https://github.com/open5gs/open5gs/issues/4217#issue-3759615968 https://github.com/open5gs/open5gs/issues/4217#issuecomment-3690767105