CVE-2025-15532

Katalog CVE

CVSS 7.5 · High EPSS 1,1%

Kerentanan Uncontrolled Resource Consumption pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A security flaw has been discovered in Open5GS up to 2.7.5. This issue affects some unknown processing of the component Timer Handler. The manipulation results in resource consumption. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. The patch is identified as c7c131f8d2cb1195ada5e0e691b6868ebcd8a845. It is best practice to apply a patch to resolve this issue.

Rincian

Terbit di NVD

17 Januari 2026

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-400: Uncontrolled Resource Consumption
CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

1,1% peluang dieksploitasi; lebih tinggi dari 63,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/issues/4220 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4220#issue-3766066853 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/issues/4221 exploit · issue tracking · advisory vendor
• https://github.com/open5gs/open5gs/commit/c7c131f8d2cb1195ada5e0e691b6868ebcd8a845 patch
• https://vuldb.com/?id.341599 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.729354 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.729357 advisory pihak ketiga · vdb entry
• https://github.com/open5gs/open5gs/
• https://vuldb.com/?ctiid.341599 permissions required · vdb entry
• https://vuldb.com/?submit.735340
• https://vuldb.com/?submit.735341
• https://vuldb.com/?submit.735342