VULNERABILITY INTELLIGENCE
CVE-2025-15418
CVSS score3.3 LOW
EPSS probability0.19%
CISA KEVNot currently listed
Published2026-01-02
Last modified2026-10-14
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Description
A security flaw has been discovered in Open5GS up to 2.7.6. Affected by this vulnerability is the function ogs_gtp2_parse_bearer_qos in the library lib/gtp/v2/types.c of the component Bearer QoS IE Length Handler. Performing a manipulation results in denial of service. The attack must be initiated from a local position. The exploit has been released to the public and may be used for attacks. The patch is named 4e913d21f2c032b187815f063dbab5ebe65fe83a. To fix this issue, it is recommended to deploy a patch.
Weakness classification
- cna@vuldb.com: CWE-404
Primary references
- cna@vuldb.com
- cna@vuldb.com — Patch
- cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
- cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
- cna@vuldb.com — Exploit, Issue Tracking, Vendor Advisory
- cna@vuldb.com — Permissions Required, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- cna@vuldb.com — Third Party Advisory, VDB Entry
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Vendor Advisory
- 134c704f-9b21-4f2e-91b3-4a467353bcc0 — Exploit, Issue Tracking, Vendor Advisory