Home

Description

EN DE

A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

Es geht dabei um die Funktion gmm_state_de_registered/gmm_state_exception der Datei src/amf/gmm-sm.c der Komponente AMF. Mit der Manipulation mit unbekannten Daten kann eine denial of service-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk passieren. Ein Aktualisieren auf die Version 2.7.6 vermag dieses Problem zu lösen. Der Patch wird als 1f30edac27f69f61cff50162e980fe58fdeb30ca bezeichnet. Als bestmögliche Massnahme wird das Einspielen eines Upgrades empfohlen.

PUBLISHED Reserved 2025-08-09 | Published 2025-08-10 | Updated 2025-08-15 | Assigner VulDB




MEDIUM: 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X
MEDIUM: 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C
MEDIUM: 5.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L/E:X/RL:O/RC:C
5.0AV:N/AC:L/Au:N/C:N/I:N/A:P/E:ND/RL:OF/RC:C

Problem types

Denial of Service

Timeline

2025-08-09:Advisory disclosed
2025-08-09:VulDB entry created
2025-08-15:VulDB entry last update

Credits

xiaohan zheng (VulDB User) reporter

xiaohan zheng (VulDB User) analyst

References

vuldb.com/?id.319332 (VDB-319332 | Open5GS AMF gmm-sm.c gmm_state_exception denial of service) vdb-entry technical-description

vuldb.com/?ctiid.319332 (VDB-319332 | CTI Indicators (IOB, IOC, TTP, IOA)) signature permissions-required

vuldb.com/?submit.626123 (Submit #626123 | Open5GS <= v2.7.5 Denial of Service) third-party-advisory

github.com/open5gs/open5gs/issues/3948 issue-tracking

github.com/open5gs/open5gs/issues/3948 issue-tracking

github.com/...ommit/1f30edac27f69f61cff50162e980fe58fdeb30ca patch

github.com/open5gs/open5gs/releases/tag/v2.7.6 patch

github.com/ZHENGHAOHELLO/BugReport related

cve.org (CVE-2025-8803)

nvd.nist.gov (CVE-2025-8803)

Download JSON