CVE-2025-8698: open5gs

csirt@kutim:~/threat-intel/cve/CVE-2025-8698

CVSS 3.3 · Low EPSS 0,21%

Kerentanan Reachable Assertion pada open5gs. Skor CVSS 3.1 3.3 (Low) menurut vuldb.com.

Deskripsi (NVD)

A vulnerability was found in Open5GS up to 2.7.5. It has been classified as problematic. Affected is the function amf_nsmf_pdusession_handle_release_sm_context of the file src/amf/nsmf-handler.c of the component AMF Service. The manipulation leads to reachable assertion. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The name of the patch is 66bc558e417e70ae216ec155e4e81c14ae0ecf30. It is recommended to apply a patch to fix this issue.

Rincian

Terbit di NVD: 7 Agustus 2025
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 3.3 (Low), sumber vuldb.com
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L · uraikan di kalkulator
Jenis kelemahan (CWE): CWE-617: Reachable Assertion
EPSS (30 hari): 0,21% peluang dieksploitasi; lebih tinggi dari 10,0% CVE lain

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
open5gs	open5gs	Semua versi hingga 2.7.5

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://github.com/open5gs/open5gs/issues/4012 exploit · issue tracking · advisory pihak ketiga
https://vuldb.com/?id.319128 advisory pihak ketiga · vdb entry
https://vuldb.com/?submit.621282 advisory pihak ketiga · vdb entry
https://github.com/open5gs/open5gs/commit/66bc558e417e70ae216ec155e4e81c14ae0ecf30 product
https://github.com/user-attachments/files/21356631/amf_nsmf_pdusession_handle_release_sm_context.zip not applicable
https://vuldb.com/?ctiid.319128 permissions required · vdb entry

Sumber: NVD · CVE.org · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.