CVE-2025-8805 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of t…
Medium CVSS: 5.5

CVE-2025-8805

A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component.
Vendor
Open5gs
Product
Open5gs
CWE
CWE-404
Yayın Tarihi
2025-08-10 11:15:29
Güncelleme
2025-08-15 14:15:30
Source Identifier
cna@vuldb.com
KEV Date Added
-

Kategoriler

CWE-404 Open5gs MEDIUM Open5gs 2025

Referanslar

https://github.com/ZHENGHAOHELLO/BugReport https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6 https://github.com/open5gs/open5gs/issues/4000 https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 https://github.com/open5gs/open5gs/releases/tag/v2.7.6 https://github.com/user-attachments/files/21229739/smf_crash.zip https://vuldb.com/?ctiid.319334 https://vuldb.com/?id.319334 https://vuldb.com/?submit.626125 https://github.com/open5gs/open5gs/issues/4000 https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920