CVE-2025-15539: falha de média gravidade em Open5GS
Open5GS sgwc s11-handler.c sgwc_s11_handle_downlink_data_notification_ack denial of service
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.9epss 0.7%
A vulnerability was determined in Open5GS up to 2.7.6. Impacted is the function sgwc_s11_handle_downlink_data_notification_ack of the file src/sgwc/s11-handler.c of the component sgwc. This manipulation causes denial of service. The attack can be initiated remotely. The exploit has been publicly disclosed and may be utilized. Patch name: b4707272c1caf6a7d4dca905694ea55557a0545f. To fix this issue, it is recommended to deploy a patch. The issue report is flagged as already-fixed.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
n/a · Open5GSReferências
https://github.com/open5gs/open5gs/https://github.com/open5gs/open5gs/commit/b4707272c1caf6a7d4dca905694ea55557a0545fhttps://github.com/open5gs/open5gs/issues/4230https://github.com/open5gs/open5gs/issues/4230#issue-3774173079https://vuldb.com/?ctiid.341732https://vuldb.com/?id.341732https://vuldb.com/?submit.735339