CVE-2025-8803: Open5GS AMF gmm-sm.c gmm_state_exception denial of service
A vulnerability has been found in Open5GS up to 2.7.5. Affected is the function gmmstatederegistered/gmmstateexception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Open5GS AMF (gmm-sm.c: gmm_state_exception / gmm_state_de_registered)to a version that resolves this vulnerability.Fixed in 2.7.6Patch 1f30edac27f69f61cff50162e980fe58fdeb30ca
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8803?
The severity of CVE-2025-8803 is classified as problematic due to the potential for denial of service.
How do I fix CVE-2025-8803?
To fix CVE-2025-8803, upgrade Open5GS AMF to version 2.7.6 or later.
What component is affected by CVE-2025-8803?
CVE-2025-8803 affects the AMF component in Open5GS.
What type of vulnerability is CVE-2025-8803?
CVE-2025-8803 is a denial of service vulnerability.
Which versions of Open5GS are impacted by CVE-2025-8803?
Open5GS versions up to and including 2.7.5 are impacted by CVE-2025-8803.