CVE-2025-15529: Open5GS s5c-handler.c sgwc_s5c_handle_create_session_response denial of service
A vulnerability was found in Open5GS up to 2.7.6. Affected by this issue is the function sgwcs5chandlecreatesessionresponse of the file src/sgwc/s5c-handler.c. Performing a manipulation results in denial of service. Remote exploitation of the attack is possible. The exploit has been made public and could be used. The patch is named b19cf6a2dbf5d30811be4488bf059c865bd7d1d2. To fix this issue, it is recommended to deploy a patch.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-15529?
CVE-2025-15529 has a severity level that indicates it can lead to denial of service in affected versions.
How do I fix CVE-2025-15529?
To fix CVE-2025-15529, you should upgrade Open5GS to version 2.7.7 or later.
What versions of Open5GS are affected by CVE-2025-15529?
Open5GS versions up to and including 2.7.6 are affected by CVE-2025-15529.
What type of vulnerability is CVE-2025-15529?
CVE-2025-15529 is categorized as a denial of service vulnerability.
Who is impacted by CVE-2025-15529?
Users of Open5GS versions up to 2.7.6 are impacted by CVE-2025-15529.