CVE-2025-8803 Information

Aug 11, 2025 cve

Description

A vulnerability which was classified as problematic was found in Open5GS up to 2.7.5. Affected is the function gmm_state_de_registered/gmm_state_exception of the file src/amf/gmm-sm.c of the component AMF. The manipulation leads to denial of service. It is possible to launch the attack remotely. Upgrading to version 2.7.6 is able to address this issue. The name of the patch is 1f30edac27f69f61cff50162e980fe58fdeb30ca. It is recommended to upgrade the affected component.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Reference

https://github.com/open5gs/open5gs/commit/1f30edac27f69f61cff50162e980fe58fdeb30ca https://github.com/open5gs/open5gs/issues/3948 https://github.com/open5gs/open5gs/issues/3948#issuecomment-3030223641 https://github.com/open5gs/open5gs/releases/tag/v2.7.6 https://vuldb.com/?ctiid.319332 https://vuldb.com/?id.319332 https://vuldb.com/?submit.626123

Attack Complexity

LOW

Privileges Required

NONE

User Interaction Required

NONE

Scope

NONE

Confidentiality Impact

UNCHANGED

Integrity Impact

NONE

Availability Impact

NONE

Base Score

LOW

Base Severity

5.3

CNNVD-202508-861 (Published: 2025-08-10)

Share on: