CVE-2025-8802— Open5GS SMF smf-sm.c smf_state_operational denial of service
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-8802
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Open5GS SMF smf-sm.c smf_state_operational denial of service
Source: NVD (National Vulnerability Database)
Vulnerability Description
A vulnerability was determined in Open5GS up to 2.7.5. This vulnerability affects the function smf_state_operational of the file src/smf/smf-sm.c of the component SMF. The manipulation of the argument stream leads to denial of service. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Upgrading to version v2.7.6 is able to address this issue. The patch is identified as f168f7586a4fa536cee95ae60ac437d997f15b97. It is recommended to upgrade the affected component.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Source: NVD (National Vulnerability Database)
Vulnerability Type
不恰当的资源关闭或释放
Source: NVD (National Vulnerability Database)
Vulnerability Title
Open5GS 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Open5GS是Open5GS开源的一个 5G Core 和 Epc 的 C 语言开源实现，即 Lte/Nr 网络的核心网络。 Open5GS 2.7.5及之前版本存在安全漏洞，该漏洞源于文件src/smf/smf-sm.c中函数smf_state_operational参数stream导致拒绝服务，可能导致远程攻击。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Open5GS | 2.7.0 | - |
II. Public POCs for CVE-2025-8802
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-8802
Please Login to view more intelligence information
Same Patch Batch · n/a · 2025-08-10 · 7 CVEs total
| CVE-2025-8805 | 5.3 MEDIUM | Open5GS SMF gsm-sm.c smf_gsm_state_wait_pfcp_deletion denial of service |
| CVE-2025-8804 | 5.3 MEDIUM | Open5GS AMF ngap_build_downlink_nas_transport assertion |
| CVE-2025-8803 | 5.3 MEDIUM | Open5GS AMF gmm-sm.c gmm_state_exception denial of service |
| CVE-2025-8801 | 5.3 MEDIUM | Open5GS AMF gmm-sm.c gmm_state_exception denial of service |
| CVE-2025-8800 | 5.3 MEDIUM | Open5GS AMF esm-handler.c esm_handle_pdn_connectivity_request denial of service |
| CVE-2025-8799 | 5.3 MEDIUM | Open5GS AMF npcf-build.c amf_nsmf_pdusession_build_create_sm_context denial of service |
IV. Related Vulnerabilities
Same product: Open5GS
- CVE-2026-8123
Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais - CVE-2026-8122
Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_ - CVE-2026-8121
Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of servic - CVE-2026-8120
Open5GS NSSF nnssf-handler.c denial of service - CVE-2026-8119
Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id deni
Same vendor: n/a
- CVE-2026-6667
PgBouncer missing authorization check in KILL_CLIENT admin c - CVE-2026-6666
PgBouncer crash in kill_pool_logins_server_error - CVE-2026-6665
PgBouncer buffer overflow in SCRAM - CVE-2026-6664
PgBouncer integer overflow in PgBouncer network packet parsi - CVE-2026-8127
eladmin Users API Endpoint UserController.java checkLevel ac
Same weakness: CWE-404
- CVE-2026-8123
Open5GS NSSF message.c ogs_sbi_discovery_option_add_snssais - CVE-2026-8122
Open5GS NSSF message.c ogs_sbi_discovery_option_add_service_ - CVE-2026-8121
Open5GS NSSF conv.c ogs_sbi_parse_plmn_list denial of servic - CVE-2026-8120
Open5GS NSSF nnssf-handler.c denial of service - CVE-2026-8119
Open5GS NSSF nghttp2-server.c ogs_sbi_stream_find_by_id deni
V. Comments for CVE-2025-8802
No comments yet