CVE-2025-8801: Open5GS AMF gmm-sm.c gmm_state_exception denial of service
A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmmstateexception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 2.7.6 is able to address this issue. The identifier of the patch is f47f2bd4f7274295c5fbb19e2f806753d183d09a. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS AMFto a version that resolves this vulnerability.Fixed in 2.7.6Patch f47f2bd4f7274295c5fbb19e2f806753d183d09a
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8801?
CVE-2025-8801 is classified as a problematic vulnerability that can lead to denial of service.
What components are affected by CVE-2025-8801?
CVE-2025-8801 affects the AMF component of Open5GS versions up to 2.7.5.
How does CVE-2025-8801 impact system availability?
CVE-2025-8801 can be exploited to cause a denial of service, making the system unavailable.
Can CVE-2025-8801 be exploited remotely?
Yes, CVE-2025-8801 can be initiated remotely, allowing attackers to exploit it from a distance.
How do I fix CVE-2025-8801?
To mitigate CVE-2025-8801, upgrade Open5GS AMF to a version later than 2.7.5.