CVE-2025-8803

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8803
A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/ZHENGHAOHELLO/BugReport
https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca Patch
https://github.com/open5gs/open5gs/issues/3948 Issue Tracking
https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 Issue Tracking
https://github.com/open5gs/open5gs/releases/tag/v2.7.6 Release Notes
https://vuldb.com/?ctiid.319332 Permissions Required VDB Entry
https://vuldb.com/?id.319332 Third Party Advisory VDB Entry
https://vuldb.com/?submit.626123 Third Party Advisory VDB Entry
https://github.com/open5gs/open5gs/issues/3948 Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
History

15 Aug 2025, 17:15

Type Values Removed Values Added
References
  • () https://github.com/ZHENGHAOHELLO/BugReport -
Summary (en) A vulnerability, which was classified as problematic, was found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component. (en) A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

13 Aug 2025, 14:31

Type Values Removed Values Added
CPE cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
First Time Open5gs open5gs
Open5gs
Summary (es) Se encontró una vulnerabilidad clasificada como problemática en Open5GS hasta la versión 2.7.5. La función gmm_state_de_registered/gmm_state_exception del archivo src/amf/gmm-sm.c del componente AMF se ve afectada. La manipulación provoca una denegación de servicio. Es posible ejecutar el ataque remotamente. Actualizar a la versión 2.7.6 puede solucionar este problema. El parche se llama 1f30edac27f69f61cff50162e980fe58fdeb30ca. Se recomienda actualizar el componente afectado. (es) Se encontró una vulnerabilidad clasificada como problemática en Open5GS hasta la versión 2.7.5. La función gmm_state_de_registered/gmm_state_exception del archivo src/amf/gmm-sm.c del componente AMF se ve afectada. La manipulación provoca una denegación de servicio. El ataque puede ejecutarse en remoto. Actualizar a la versión 2.7.6 puede solucionar este problema. El parche se llama 1f30edac27f69f61cff50162e980fe58fdeb30ca. Se recomienda actualizar el componente afectado.
References () https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca - () https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca - Patch
References () https://github.com/open5gs/open5gs/issues/3948 - () https://github.com/open5gs/open5gs/issues/3948 - Issue Tracking
References () https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 - () https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 - Issue Tracking
References () https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - () https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - Release Notes
References () https://vuldb.com/?ctiid.319332 - () https://vuldb.com/?ctiid.319332 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.319332 - () https://vuldb.com/?id.319332 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.626123 - () https://vuldb.com/?submit.626123 - Third Party Advisory, VDB Entry

12 Aug 2025, 16:15

Type Values Removed Values Added
References () https://github.com/open5gs/open5gs/issues/3948 - () https://github.com/open5gs/open5gs/issues/3948 -

11 Aug 2025, 18:32

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad clasificada como problemática en Open5GS hasta la versión 2.7.5. La función gmm_state_de_registered/gmm_state_exception del archivo src/amf/gmm-sm.c del componente AMF se ve afectada. La manipulación provoca una denegación de servicio. Es posible ejecutar el ataque remotamente. Actualizar a la versión 2.7.6 puede solucionar este problema. El parche se llama 1f30edac27f69f61cff50162e980fe58fdeb30ca. Se recomienda actualizar el componente afectado.

10 Aug 2025, 10:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-10 10:15

Updated : 2025-08-15 17:15

NVD link : CVE-2025-8803

Mitre link : CVE-2025-8803

CVE.ORG link : CVE-2025-8803

JSON object : View

Products Affected

open5gs

  • open5gs
CWE
CWE-404

Improper Resource Shutdown or Release