CVE-2025-15418: Open5GS Bearer QoS IE Length types.c ogs_gtp2_parse_bearer_qos denial of service
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogsgtp2parsebearerqos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial of service. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is named 4e913d21f2c032b187815f063dbab5ebe65fe83a. To fix this issue, it is recommended to deploy a patch.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15418?
CVE-2025-15418 has a high severity level due to its ability to cause denial of service.
How do I fix CVE-2025-15418?
To mitigate CVE-2025-15418, it is recommended to upgrade Open5GS to a version higher than 2.7.6.
What components are affected by CVE-2025-15418?
CVE-2025-15418 affects the Bearer QoS IE Length Handler in the lib/gtp/v2/types.c component of Open5GS.
What type of attack is associated with CVE-2025-15418?
CVE-2025-15418 is associated with a manipulation attack that leads to denial of service.
Which versions of Open5GS are impacted by CVE-2025-15418?
Open5GS versions up to and including 2.7.6 are impacted by CVE-2025-15418.