CVE-2025-15417: Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service
A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwcs11handlecreatesessionrequest of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15417?
CVE-2025-15417 is a denial of service vulnerability affecting Open5GS up to version 2.7.6.
How do I fix CVE-2025-15417?
To fix CVE-2025-15417, upgrade Open5GS to a version later than 2.7.6.
Who is affected by CVE-2025-15417?
Open5GS users running versions up to and including 2.7.6 are affected by CVE-2025-15417.
What type of attack is executed with CVE-2025-15417?
CVE-2025-15417 allows for a local denial of service attack against the GTPv2-C F-TEID Handler.
Is CVE-2025-15417 remotely exploitable?
No, CVE-2025-15417 requires local access to exploit the vulnerability.