CVE-2025-15417

Katalog CVE

CVSS 5.5 · Medium EPSS 0,19%

Kerentanan Improper Resource Shutdown or Release pada open5gs. Skor CVSS 3.1 5.5 (Medium) menurut NVD.

Deskripsi (NVD)

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.

Rincian

Terbit di NVD

1 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

5.5 (Medium), sumber NVD
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,19% peluang dieksploitasi; lebih tinggi dari 8,4% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4203 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4203#issue-3719257558 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4203#issuecomment-3681643498 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1 patch
• https://vuldb.com/?id.339339 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.727616 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/
• https://vuldb.com/?ctiid.339339 permissions required · vdb entry