CVE-2025-8803

Katalog CVE

CVSS 7.5 · High EPSS 0,61%

Kerentanan Improper Resource Shutdown or Release pada open5gs. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

Rincian

Terbit di NVD

10 Agustus 2025

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-404: Improper Resource Shutdown or Release

EPSS (30 hari)

0,61% peluang dieksploitasi; lebih tinggi dari 47,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca patch
• https://vuldb.com/?id.319332 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.626123 advisory pihak ketiga · vdb entry
• https://github.com/ZHENGHAOHELLO/BugReport
• https://github.com/open5gs/open5gs/issues/3948 issue tracking
• https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 issue tracking
• https://github.com/open5gs/open5gs/releases/tag/v2.7.6 release notes
• https://vuldb.com/?ctiid.319332 permissions required · vdb entry