CNNVD-202601-774 Information

Jan 02, 2026 cve

CNNVD ID

CNNVD-202601-774

CVE-2025-15419

CNNVD Published: 2026-01-02

Description (Chinese)

Open5GS是Open5GS开源的一个 5G Core 和 Epc 的 C 语言开源实现，即 Lte/Nr 网络的核心网络。 Open5GS 2.7.6及之前版本存在安全漏洞，该漏洞源于对文件src/sgwc/s5c-handler.c中函数sgwc_s5c_handle_create_session_response的错误操作，可能导致拒绝服务攻击。

Description (English)

Open5GS is a 5G Core and Epc open-language C open source of Open5GS, the core network of the Lte/Nr network. Open5GS 2.7.6 and previous versions contain a security loophole, which is the result of an error in the performance of the sgwc s5c handle session response function in document src/sgwc/s5c-handler.c, which could lead to a denial of service attack.

Hazard Level

Critical

Vulnerability Type

其他

Affected Vendor

Open5GS

Published

2026-01-02

Last Modified

2026-02-24

References

https://github.com/open5gs/open5gs/issues/4224#issuecomment-3698521008 https://vuldb.com/?ctiid.339341 https://github.com/open5gs/open5gs/commit/5aaa09907e7b9e0a326265a5f08d56f54280b5f2 https://vuldb.com/?id.339341 https://github.com/open5gs/open5gs/issues/4224#issue-3766767406 https://vuldb.com/?submit.728044 https://access.redhat.com/security/cve/cve-2025-15419

Share on: