CVE-2025-1925: Open5GS AMF nsmf-handler.c amf_nsmf_pdusession_handle_update_sm_context denial of service
A vulnerability classified as problematic was found in Open5GS up to 2.7.2. Affected by this vulnerability is the function amfnsmfpdusessionhandleupdatesmcontext of the file src/amf/nsmf-handler.c of the component AMF. The manipulation leads to denial of service. The attack can be launched remotely. This vulnerability allows a single UE to crash the AMF, resulting in the complete loss of mobility and session management services and causing a network-wide outage. All registered UEs will lose connectivity, and new registrations will be blocked until the AMF is restarted, leading to a high availability impact. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-1925?
CVE-2025-1925 has been classified as a problematic vulnerability due to its potential for denial of service.
What component of Open5GS is affected by CVE-2025-1925?
CVE-2025-1925 affects the AMF component of Open5GS.
How does CVE-2025-1925 impact the system?
CVE-2025-1925 can lead to a denial of service, disrupting normal functionality.
What versions of Open5GS are affected by CVE-2025-1925?
Open5GS versions up to and including 2.7.2 are affected by CVE-2025-1925.
How can CVE-2025-1925 be mitigated?
Mitigation for CVE-2025-1925 involves updating Open5GS to a version beyond 2.7.2.