CVE-2025-8805

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-8805
A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component.

5.3 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 3.9 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact LOW

Scope UNCHANGED

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact NONE

Availability Impact PARTIAL

References
Link Resource
https://github.com/ZHENGHAOHELLO/BugReport
https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6 Patch
https://github.com/open5gs/open5gs/issues/4000 Issue Tracking
https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 Issue Tracking
https://github.com/open5gs/open5gs/releases/tag/v2.7.6 Release Notes
https://github.com/user-attachments/files/21229739/smf_crash.zip Exploit
https://vuldb.com/?ctiid.319334 Permissions Required VDB Entry
https://vuldb.com/?id.319334 Third Party Advisory VDB Entry
https://vuldb.com/?submit.626125 Third Party Advisory VDB Entry
https://github.com/open5gs/open5gs/issues/4000 Issue Tracking
https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 Issue Tracking
Configurations

Configuration 1 (hide)

cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
History

15 Aug 2025, 14:15

Type Values Removed Values Added
References
  • () https://github.com/ZHENGHAOHELLO/BugReport -
Summary (en) A vulnerability was found in Open5GS up to 2.7.5 and classified as problematic. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component. (en) A vulnerability was determined in Open5GS up to 2.7.5. Affected by this issue is the function smf_gsm_state_wait_pfcp_deletion of the file src/smf/gsm-sm.c of the component SMF. The manipulation leads to denial of service. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The patch is identified as c58b8f081986aaf2a312d73a0a17985518b47fe6. It is recommended to upgrade the affected component.

13 Aug 2025, 15:15

Type Values Removed Values Added
References () https://github.com/open5gs/open5gs/issues/4000 - Issue Tracking () https://github.com/open5gs/open5gs/issues/4000 - Issue Tracking
References () https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 - Issue Tracking () https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 - Issue Tracking

13 Aug 2025, 14:35

Type Values Removed Values Added
References () https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6 - () https://github.com/open5gs/open5gs/commit/c58b8f081986aaf2a312d73a0a17985518b47fe6 - Patch
References () https://github.com/open5gs/open5gs/issues/4000 - () https://github.com/open5gs/open5gs/issues/4000 - Issue Tracking
References () https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 - () https://github.com/open5gs/open5gs/issues/4000#issuecomment-3091321920 - Issue Tracking
References () https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - () https://github.com/open5gs/open5gs/releases/tag/v2.7.6 - Release Notes
References () https://github.com/user-attachments/files/21229739/smf_crash.zip - () https://github.com/user-attachments/files/21229739/smf_crash.zip - Exploit
References () https://vuldb.com/?ctiid.319334 - () https://vuldb.com/?ctiid.319334 - Permissions Required, VDB Entry
References () https://vuldb.com/?id.319334 - () https://vuldb.com/?id.319334 - Third Party Advisory, VDB Entry
References () https://vuldb.com/?submit.626125 - () https://vuldb.com/?submit.626125 - Third Party Advisory, VDB Entry
CPE cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*
First Time Open5gs
Open5gs open5gs

11 Aug 2025, 18:32

Type Values Removed Values Added
Summary
  • (es) Se encontró una vulnerabilidad en Open5GS hasta la versión 2.7.5, clasificada como problemática. Este problema afecta a la función smf_gsm_state_wait_pfcp_deletion del archivo src/smf/gsm-sm.c del componente SMF. La manipulación provoca una denegación de servicio. El ataque puede ejecutarse en remoto. Se ha hecho público el exploit y puede que sea utilizado. Actualizar a la versión 2.7.6 puede solucionar este problema. El parche se identifica como c58b8f081986aaf2a312d73a0a17985518b47fe6. Se recomienda actualizar el componente afectado.

10 Aug 2025, 11:15

Type Values Removed Values Added
New CVE
Information

Published : 2025-08-10 11:15

Updated : 2025-08-15 14:15

NVD link : CVE-2025-8805

Mitre link : CVE-2025-8805

CVE.ORG link : CVE-2025-8805

JSON object : View

Products Affected

open5gs

  • open5gs
CWE
CWE-404

Improper Resource Shutdown or Release