{"id":"CVE-2025-15417","summary":"Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service","details":"A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwc_s11_handle_create_session_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.","modified":"2026-08-12T15:16:15.239221Z","published":"2026-01-01T23:02:07.030Z","database_specific":{"unresolved_ranges":[{"extracted_events":[{"introduced":"2.7.3"},{"last_affected":"2.7.3"},{"introduced":"2.7.4"},{"last_affected":"2.7.4"}],"source":"AFFECTED_FIELD"}],"cna_assigner":"VulDB","cwe_ids":["CWE-404"],"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15417.json"},"references":[{"type":"WEB","url":"https://github.com/open5gs/open5gs/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15417.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-15417"},{"type":"ADVISORY","url":"https://vuldb.com/?id.339339"},{"type":"ADVISORY","url":"https://vuldb.com/?submit.727616"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/4203"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/4203#issue-3719257558"},{"type":"REPORT","url":"https://github.com/open5gs/open5gs/issues/4203#issuecomment-3681643498"},{"type":"REPORT","url":"https://vuldb.com/?ctiid.339339"},{"type":"FIX","url":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/open5gs/open5gs","events":[{"introduced":"0"},{"fixed":"465273d13ba5d47b274c38c9d1b07f04859178a1"}],"database_specific":{"extracted_events":[{"introduced":"0"},{"last_affected":"2.7.6"}],"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*"}}],"versions":["2.7.0","2.7.1","2.7.2","2.7.5","2.7.6","v2.7.2","v2.7.1","v2.7.0","v2.6.6","v2.6.4","v2.6.3","v2.6.2","v2.6.1","v2.4.9","v2.4.8","v2.4.7","v2.4.5","v2.4.4","v2.4.3","v2.4.1","v2.4.0","v2.3.6","v2.3.2","v2.3.0","v2.2.9","v2.2.8","v2.2.7","v2.2.6","v2.2.1","v2.2.0","v2.1.7","v2.1.5","v2.1.4","v2.1.3","v2.1.1","v2.1.0","v2.0.22","v2.0.18","v2.0.0","v1.3.0","v1.2.4","v1.2.3","v1.2.2","v1.2.1","v1.2.0","v1.1.0","v1.0.0","v0.5.2","v0.5.1","v0.5.0","v0.4.4","v0.4.3","v0.4.2","v0.4.1","v0.3.10","v0.3.8","v0.3.6","v0.3.5","v0.3.4","v0.3.3","v0.3.2","v0.3.1","v0.3.0","v0.2.0","v0.1.1","v0.1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15417.json","vanir_signatures_modified":"2026-08-12T15:16:15Z","vanir_signatures":[{"deprecated":false,"digest":{"function_hash":"112129439599489847186045253689900311818","length":4469},"id":"CVE-2025-15417-1c2ce628","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request"}},{"signature_type":"Line","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c"},"deprecated":false,"digest":{"line_hashes":["69252971154150296679317401457452794801","53194633388385525246855187684268424823","3800886709316814397173688543786027921","293662775462934962357314721972893154005","193652102784146749254350761324523389920","164433640196723020510447719666428220481","282040608693849403187379446398407008991","286171864225299513435490095410669792237","319643676880248287984638454941754414880","280253894621246785833836563039842748007","262077354428377773220764591578403924622","185981836966462130775324174995603717637","187716933940531559524284092286832149693","307665272551922066509868792173414692485","169266961970187150157295297644269419072","282040608693849403187379446398407008991","286171864225299513435490095410669792237","319643676880248287984638454941754414880","280253894621246785833836563039842748007","4455077673772766224426245339030347579","143882610541012930664509407568061544738","263850240717791849315163625883499658336","156768513400526567376981359835553045735","20816231251625490188416336439035292891","331406989408354668484621493302178837440","307751634365924145516550643017223914467","305592049476067216941740041705079826896","228992284518500409948541504556211195245","18759057153043549612548799022388777318","204761325508752721907578996734124042755","88521513303513939675598275777554425113","221056054884388462120035749783879456779","280886692976668364734630251862948232091","197620247735244769513096182392326142093","296472585985572284884467331692683162481","36203890905046899482170958304462647560","54815067592092688595065274551285933617","324323056588831100456238373323423860342","139828884006317072091438450237882157784","177630201585708357845579753092718636876","176783854660480406010042778110142362461","256221322175406348715536003097668663553","265010361956998445049822110310232828181","41229822612866910496834945349826157050","84318076338646372841063675361300741957","186079943684750017921604524549193888572","248591934484603366785924257791543135354","294506406952035357938116978627380319754","269972399327283499425774581663262804104","202650228743881459984566915178828919468","229424844212275381829461275603120845081","304292847375967591857016033987121615593","42313954126042474444102355910470846926","284538484686931898932541645876991350658","18402763167256053597196657632467222788","116269820733761534107704200886964576205","85415115327276207360557139440546179291","138869609464511279040494911513866082983","232099909184595383121327005632310444304","177093526759009615574720609056915465937","67949645011309450073310367654085195105","99085885093575709394652743435693321634","102102522717331888025947904321213877322","153008523655694957748950489037155512772","147604467757454951157198794707827631065","18737205905137660883258958142063185838","194430879611957716643415150445351890204","288768948123990829394746296368782324332","110359916979308468086097761989882701546","137155650928914804690992354024806741610","193652102784146749254350761324523389920","164433640196723020510447719666428220481","282040608693849403187379446398407008991","255276297617399424097918597040015873634","267311302665006063826986028400977011715","164553299044275117480904913671550929588","335287346070588665795022322668376912843","53115809306251357830201585546247432853","66023595861713779756691434028319018627","291417885017875028630065017207935070582","226306161869604668324283579661890611979","88917036994368094180821727224361794071","22468569028011124690157962060361936690","13861430436760810970323049688896817305","58441855859713042617319976146787935749","186079943684750017921604524549193888572","248591934484603366785924257791543135354","335272193817324697907449758866531311555","279399822694117696329764391971324830557","187279439775857817279900840621595900864","33925102148706645575263588703906179525","305104496373147073975303318467094491666","267311302665006063826986028400977011715","164553299044275117480904913671550929588","234227918889590732948814496873934428065","93204483688678323103980964560501724254","44055247894330157533220929672207953621","125456908972663982313953287333425798515","338474738329875356139000421621136924020","339283173433219337723863862690309654124","328964054737027094686727576645774138697","296799592856950101654844415814500025492","282040608693849403187379446398407008991","199252401444737550467094436393929483208","154364467508569306148331439037257095606","15678987046780127912101745100762925902","284064606360694061123931126776422125049","212934584271256486672081898920818648310","27407256781224744572532879748499290365","297852828516136625139450961922819833264","84558814282532320530929295213620265924","206950594807490487770908391732593566406","209275510864280718170810124211205764957","146050910864637515068966203693055292489","119649197858132636490739234536083821877","257596516067714066468557205810933618586","272735276980006449649652087037197598531","179880968116206207588322787110118392907","104080168655449931919273015672421344510","246161693110512126329130029751468997772","86054746791645661473110474373730354357","324632453465824882868982397747789599629","117593673902961980868118773945635105658","167592047738748054812061664113422156786","245419558861039237462131632745469302865","261243096142738858489112661827746816306","202496807451949701091031762650899598698","270187864112592134833524278399624384216","141917173833432124509708687186382338650","165166088082638810139038116649575266250","245419558861039237462131632745469302865","56427842687468792622528811128285041287","272735276980006449649652087037197598531","142756765381329630099879270421517614363","111067636147246975938415757756068703348","215724590706447646226058117341183459095","299046813105649854904433198795220938806","136888009751748521134115684292560154994","6602985944034168546134450264455261200","300573810836519329970198295854042486559","211529692907283854362798715405168088568","330459873202095203568131358216374617471","130276733707536180696247837955628519898","276262108390657214454642879303818520450","153923296226742522473684115408935702409","137937875627600718376334877138777513039","138289467010732734236734503703351316915","120103742744230115589307226658142039898","209216226723257756281303471913557522974","74938982806449620206776421121020867268","313590911143573045415992619222563336811","176942040074929891996002843889792622163","321180265042646184766610302130143235872","181004916841130994154076758949244904879","13861430436760810970323049688896817305","58441855859713042617319976146787935749","186079943684750017921604524549193888572","248591934484603366785924257791543135354","121192995057439837929335865915865509492","17792480614071622217526715134535088129","57481085273436570444130272379135227092","326687513777480784341433242448434765124","22059334591928683885453627869407783192","17065026752823733373286494421779490657","234669041306199023129336276451797779900","168976502878243024137057806324271507221","313196804277357879828664017376178008485","288613770516504593972046909851961464069","6447836902755142166263397690187627765","25601486321306334689720914666955055210","202496807451949701091031762650899598698","231954136638825170246751344101883976292","2214962810477590464757854158852239990","4707542828596908105219021794845685396","120886029701181618835067665014318389625","6447836902755142166263397690187627765","191199986473229108817924662546727990894","320624358163060452656980842202513155185","20449723608403194914670221615419802601","283953179286712005701042981503836680137","57650726658826759272701704421757437804","6447836902755142166263397690187627765","308370385561876604159182284784197050109","272735276980006449649652087037197598531","152913865215297935338179435615669455088","76948169910839194315381844004359184903","34726393054686691934419757079062650561","74544582470704609014370431346023184976","193652102784146749254350761324523389920","164433640196723020510447719666428220481","282040608693849403187379446398407008991","294657341109689849299591929499841239119","337042038125501280164829000744028702370","251350976364361701040811315822829753894","162916644447905943400988820799417197958","323393038117163642979124118688752930941","54281741294640195339919796979613587849","205416342216846598850273570079517469213","114205674711737260975926054649082343212","256863725755236473940146078600443868048","27554892322508428436939380049325370207","143063134015489403695599420207394340834","276023908307555709498599387553976477969","35824474054277252774023355360970057334","137182810693294930197214058735538075604","203488121963690564026577816994598946100","298604085314359691607485333503461721175","335621457313501042299764451690318234653","20290368421844278845086509810451169353","254309738982874956363518318621723814929","336878394811925160735683096951488522059","25923812600753621704041770511319639807","292537006212939917945752840456132934672","32591863219301582904774118488973002711","180405478671646636875180629974430662266","142568318795573542167912339948657918596","92777457599492381140482850335781791829","133352957033995847493017633497338847040","261897584233355322557847495577919991550","2640256791728701448032922495721190592","44187311474317145356731491006104531112","246682594166884959501018790535699432529","167497515458090824312342965554098086645","244496912456213124451891951110290472887","186474757704238025028741648545706674529","7007213732095738688581583112564678761","143063134015489403695599420207394340834","63347429099860186309926990947155016776","35824474054277252774023355360970057334","114029067913149336886052787987789309367","261092337127416637096445851074606355726","180200484605766956141686035391390349089","26323016573465640354175276243081589880","103685761064423878072595439806975759562","225566174294009119589987614874116942002","244316316384380209094476205300538348597","290172646850161493393050899727603495552","292942173183433828662450417191578764231","138102419812461101801027082526518907241","224872967727940357397907681694694793379","142568318795573542167912339948657918596","92777457599492381140482850335781791829","133352957033995847493017633497338847040","261897584233355322557847495577919991550","2640256791728701448032922495721190592","44187311474317145356731491006104531112","246682594166884959501018790535699432529","167497515458090824312342965554098086645","244496912456213124451891951110290472887","186474757704238025028741648545706674529","7007213732095738688581583112564678761","143063134015489403695599420207394340834","63347429099860186309926990947155016776","35824474054277252774023355360970057334","114029067913149336886052787987789309367","261092337127416637096445851074606355726","180200484605766956141686035391390349089","26323016573465640354175276243081589880","103685761064423878072595439806975759562","225566174294009119589987614874116942002","244316316384380209094476205300538348597","290172646850161493393050899727603495552","133358371277550220874466122068691664051","263381642128176281340735980981976570416","2621567026628773442460085933500424416","273199242037160721659195842437237634641","178221364347347817503908618610601572445","115352347975377681162066959183240085321"],"threshold":0.9},"id":"CVE-2025-15417-4f5b68e3"},{"deprecated":false,"digest":{"function_hash":"336266084022383087245368612040709136303","length":2477},"id":"CVE-2025-15417-51909484","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_delete_session_request"}},{"signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_create_session_request"},"deprecated":false,"digest":{"function_hash":"107790643913313609148032183095104600763","length":6528},"id":"CVE-2025-15417-5787ae5b"},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_create_bearer_response"},"deprecated":false,"digest":{"function_hash":"339727047474247718071653552336486098978","length":5492},"id":"CVE-2025-15417-8c4b45be","signature_type":"Function"},{"signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_update_bearer_response"},"deprecated":false,"digest":{"function_hash":"316307884848535685909406420248344590098","length":2939},"id":"CVE-2025-15417-a125c778","signature_type":"Function"},{"deprecated":false,"digest":{"function_hash":"278428270364212839091272938925544888859","length":5231},"id":"CVE-2025-15417-d510d9c2","signature_type":"Function","signature_version":"v1","source":"https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1","target":{"file":"src/sgwc/s11-handler.c","function":"sgwc_s11_handle_modify_bearer_request"}}]}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V4","score":"CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P"}]}