CVE-2025-15417

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-15417
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15417.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-15417
Published
2026-01-01T23:02:07.030Z
Modified
2026-07-15T16:00:32.271918Z
Severity
  • 1.9 (Low) CVSS_V4 - CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Open5GS GTPv2-C F-TEID s11-handler.c sgwc_s11_handle_create_session_request denial of service
Details

A vulnerability was identified in Open5GS up to 2.7.6. Affected is the function sgwcs11handlecreatesession_request of the file src/sgwc/s11-handler.c of the component GTPv2-C F-TEID Handler. Such manipulation leads to denial of service. The attack must be carried out locally. The exploit is publicly available and might be used. The name of the patch is 465273d13ba5d47b274c38c9d1b07f04859178a1. A patch should be applied to remediate this issue.

Database specific 
{
    "cwe_ids": [
        "CWE-404"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/15xxx/CVE-2025-15417.json",
    "cna_assigner": "VulDB",
    "unresolved_ranges": [
        {
            "source": "AFFECTED_FIELD",
            "extracted_events": [
                {
                    "introduced": "2.7.3"
                },
                {
                    "last_affected": "2.7.3"
                },
                {
                    "introduced": "2.7.4"
                },
                {
                    "last_affected": "2.7.4"
                }
            ]
        }
    ]
}
References

Affected packages

Git / github.com/open5gs/open5gs

Affected ranges

Type
GIT
Repo
https://github.com/open5gs/open5gs
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
465273d13ba5d47b274c38c9d1b07f04859178a1
Database specific 
{
    "cpe": "cpe:2.3:a:open5gs:open5gs:*:*:*:*:*:*:*:*",
    "source": [
        "CPE_RANGE",
        "REFERENCES"
    ],
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "2.7.6"
        }
    ]
}

Affected versions

2.*
2.7.0
2.7.1
2.7.2
2.7.5
2.7.6
v0.*
v0.1.0
v0.1.1
v0.2.0
v0.3.0
v0.3.1
v0.3.10
v0.3.2
v0.3.3
v0.3.4
v0.3.5
v0.3.6
v0.3.8
v0.4.1
v0.4.2
v0.4.3
v0.4.4
v0.5.0
v0.5.1
v0.5.2
v1.*
v1.0.0
v1.1.0
v1.2.0
v1.2.1
v1.2.2
v1.2.3
v1.2.4
v1.3.0
v2.*
v2.0.0
v2.0.18
v2.0.22
v2.1.0
v2.1.1
v2.1.3
v2.1.4
v2.1.5
v2.1.7
v2.2.0
v2.2.1
v2.2.6
v2.2.7
v2.2.8
v2.2.9
v2.3.0
v2.3.2
v2.3.6
v2.4.0
v2.4.1
v2.4.3
v2.4.4
v2.4.5
v2.4.7
v2.4.8
v2.4.9
v2.6.1
v2.6.2
v2.6.3
v2.6.4
v2.6.6
v2.7.0
v2.7.1
v2.7.2

Database specific

vanir_signatures_modified 
"2026-07-15T16:00:32Z"
vanir_signatures 
[
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_create_indirect_data_forwarding_tunnel_request"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-1c2ce628",
        "signature_version": "v1",
        "digest": {
            "function_hash": "112129439599489847186045253689900311818",
            "length": 4469.0
        }
    },
    {
        "signature_type": "Line",
        "target": {
            "file": "src/sgwc/s11-handler.c"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-4f5b68e3",
        "signature_version": "v1",
        "digest": {
            "line_hashes": [
                "69252971154150296679317401457452794801",
                "53194633388385525246855187684268424823",
                "3800886709316814397173688543786027921",
                "293662775462934962357314721972893154005",
                "193652102784146749254350761324523389920",
                "164433640196723020510447719666428220481",
                "282040608693849403187379446398407008991",
                "286171864225299513435490095410669792237",
                "319643676880248287984638454941754414880",
                "280253894621246785833836563039842748007",
                "262077354428377773220764591578403924622",
                "185981836966462130775324174995603717637",
                "187716933940531559524284092286832149693",
                "307665272551922066509868792173414692485",
                "169266961970187150157295297644269419072",
                "282040608693849403187379446398407008991",
                "286171864225299513435490095410669792237",
                "319643676880248287984638454941754414880",
                "280253894621246785833836563039842748007",
                "4455077673772766224426245339030347579",
                "143882610541012930664509407568061544738",
                "263850240717791849315163625883499658336",
                "156768513400526567376981359835553045735",
                "20816231251625490188416336439035292891",
                "331406989408354668484621493302178837440",
                "307751634365924145516550643017223914467",
                "305592049476067216941740041705079826896",
                "228992284518500409948541504556211195245",
                "18759057153043549612548799022388777318",
                "204761325508752721907578996734124042755",
                "88521513303513939675598275777554425113",
                "221056054884388462120035749783879456779",
                "280886692976668364734630251862948232091",
                "197620247735244769513096182392326142093",
                "296472585985572284884467331692683162481",
                "36203890905046899482170958304462647560",
                "54815067592092688595065274551285933617",
                "324323056588831100456238373323423860342",
                "139828884006317072091438450237882157784",
                "177630201585708357845579753092718636876",
                "176783854660480406010042778110142362461",
                "256221322175406348715536003097668663553",
                "265010361956998445049822110310232828181",
                "41229822612866910496834945349826157050",
                "84318076338646372841063675361300741957",
                "186079943684750017921604524549193888572",
                "248591934484603366785924257791543135354",
                "294506406952035357938116978627380319754",
                "269972399327283499425774581663262804104",
                "202650228743881459984566915178828919468",
                "229424844212275381829461275603120845081",
                "304292847375967591857016033987121615593",
                "42313954126042474444102355910470846926",
                "284538484686931898932541645876991350658",
                "18402763167256053597196657632467222788",
                "116269820733761534107704200886964576205",
                "85415115327276207360557139440546179291",
                "138869609464511279040494911513866082983",
                "232099909184595383121327005632310444304",
                "177093526759009615574720609056915465937",
                "67949645011309450073310367654085195105",
                "99085885093575709394652743435693321634",
                "102102522717331888025947904321213877322",
                "153008523655694957748950489037155512772",
                "147604467757454951157198794707827631065",
                "18737205905137660883258958142063185838",
                "194430879611957716643415150445351890204",
                "288768948123990829394746296368782324332",
                "110359916979308468086097761989882701546",
                "137155650928914804690992354024806741610",
                "193652102784146749254350761324523389920",
                "164433640196723020510447719666428220481",
                "282040608693849403187379446398407008991",
                "255276297617399424097918597040015873634",
                "267311302665006063826986028400977011715",
                "164553299044275117480904913671550929588",
                "335287346070588665795022322668376912843",
                "53115809306251357830201585546247432853",
                "66023595861713779756691434028319018627",
                "291417885017875028630065017207935070582",
                "226306161869604668324283579661890611979",
                "88917036994368094180821727224361794071",
                "22468569028011124690157962060361936690",
                "13861430436760810970323049688896817305",
                "58441855859713042617319976146787935749",
                "186079943684750017921604524549193888572",
                "248591934484603366785924257791543135354",
                "335272193817324697907449758866531311555",
                "279399822694117696329764391971324830557",
                "187279439775857817279900840621595900864",
                "33925102148706645575263588703906179525",
                "305104496373147073975303318467094491666",
                "267311302665006063826986028400977011715",
                "164553299044275117480904913671550929588",
                "234227918889590732948814496873934428065",
                "93204483688678323103980964560501724254",
                "44055247894330157533220929672207953621",
                "125456908972663982313953287333425798515",
                "338474738329875356139000421621136924020",
                "339283173433219337723863862690309654124",
                "328964054737027094686727576645774138697",
                "296799592856950101654844415814500025492",
                "282040608693849403187379446398407008991",
                "199252401444737550467094436393929483208",
                "154364467508569306148331439037257095606",
                "15678987046780127912101745100762925902",
                "284064606360694061123931126776422125049",
                "212934584271256486672081898920818648310",
                "27407256781224744572532879748499290365",
                "297852828516136625139450961922819833264",
                "84558814282532320530929295213620265924",
                "206950594807490487770908391732593566406",
                "209275510864280718170810124211205764957",
                "146050910864637515068966203693055292489",
                "119649197858132636490739234536083821877",
                "257596516067714066468557205810933618586",
                "272735276980006449649652087037197598531",
                "179880968116206207588322787110118392907",
                "104080168655449931919273015672421344510",
                "246161693110512126329130029751468997772",
                "86054746791645661473110474373730354357",
                "324632453465824882868982397747789599629",
                "117593673902961980868118773945635105658",
                "167592047738748054812061664113422156786",
                "245419558861039237462131632745469302865",
                "261243096142738858489112661827746816306",
                "202496807451949701091031762650899598698",
                "270187864112592134833524278399624384216",
                "141917173833432124509708687186382338650",
                "165166088082638810139038116649575266250",
                "245419558861039237462131632745469302865",
                "56427842687468792622528811128285041287",
                "272735276980006449649652087037197598531",
                "142756765381329630099879270421517614363",
                "111067636147246975938415757756068703348",
                "215724590706447646226058117341183459095",
                "299046813105649854904433198795220938806",
                "136888009751748521134115684292560154994",
                "6602985944034168546134450264455261200",
                "300573810836519329970198295854042486559",
                "211529692907283854362798715405168088568",
                "330459873202095203568131358216374617471",
                "130276733707536180696247837955628519898",
                "276262108390657214454642879303818520450",
                "153923296226742522473684115408935702409",
                "137937875627600718376334877138777513039",
                "138289467010732734236734503703351316915",
                "120103742744230115589307226658142039898",
                "209216226723257756281303471913557522974",
                "74938982806449620206776421121020867268",
                "313590911143573045415992619222563336811",
                "176942040074929891996002843889792622163",
                "321180265042646184766610302130143235872",
                "181004916841130994154076758949244904879",
                "13861430436760810970323049688896817305",
                "58441855859713042617319976146787935749",
                "186079943684750017921604524549193888572",
                "248591934484603366785924257791543135354",
                "121192995057439837929335865915865509492",
                "17792480614071622217526715134535088129",
                "57481085273436570444130272379135227092",
                "326687513777480784341433242448434765124",
                "22059334591928683885453627869407783192",
                "17065026752823733373286494421779490657",
                "234669041306199023129336276451797779900",
                "168976502878243024137057806324271507221",
                "313196804277357879828664017376178008485",
                "288613770516504593972046909851961464069",
                "6447836902755142166263397690187627765",
                "25601486321306334689720914666955055210",
                "202496807451949701091031762650899598698",
                "231954136638825170246751344101883976292",
                "2214962810477590464757854158852239990",
                "4707542828596908105219021794845685396",
                "120886029701181618835067665014318389625",
                "6447836902755142166263397690187627765",
                "191199986473229108817924662546727990894",
                "320624358163060452656980842202513155185",
                "20449723608403194914670221615419802601",
                "283953179286712005701042981503836680137",
                "57650726658826759272701704421757437804",
                "6447836902755142166263397690187627765",
                "308370385561876604159182284784197050109",
                "272735276980006449649652087037197598531",
                "152913865215297935338179435615669455088",
                "76948169910839194315381844004359184903",
                "34726393054686691934419757079062650561",
                "74544582470704609014370431346023184976",
                "193652102784146749254350761324523389920",
                "164433640196723020510447719666428220481",
                "282040608693849403187379446398407008991",
                "294657341109689849299591929499841239119",
                "337042038125501280164829000744028702370",
                "251350976364361701040811315822829753894",
                "162916644447905943400988820799417197958",
                "323393038117163642979124118688752930941",
                "54281741294640195339919796979613587849",
                "205416342216846598850273570079517469213",
                "114205674711737260975926054649082343212",
                "256863725755236473940146078600443868048",
                "27554892322508428436939380049325370207",
                "143063134015489403695599420207394340834",
                "276023908307555709498599387553976477969",
                "35824474054277252774023355360970057334",
                "137182810693294930197214058735538075604",
                "203488121963690564026577816994598946100",
                "298604085314359691607485333503461721175",
                "335621457313501042299764451690318234653",
                "20290368421844278845086509810451169353",
                "254309738982874956363518318621723814929",
                "336878394811925160735683096951488522059",
                "25923812600753621704041770511319639807",
                "292537006212939917945752840456132934672",
                "32591863219301582904774118488973002711",
                "180405478671646636875180629974430662266",
                "142568318795573542167912339948657918596",
                "92777457599492381140482850335781791829",
                "133352957033995847493017633497338847040",
                "261897584233355322557847495577919991550",
                "2640256791728701448032922495721190592",
                "44187311474317145356731491006104531112",
                "246682594166884959501018790535699432529",
                "167497515458090824312342965554098086645",
                "244496912456213124451891951110290472887",
                "186474757704238025028741648545706674529",
                "7007213732095738688581583112564678761",
                "143063134015489403695599420207394340834",
                "63347429099860186309926990947155016776",
                "35824474054277252774023355360970057334",
                "114029067913149336886052787987789309367",
                "261092337127416637096445851074606355726",
                "180200484605766956141686035391390349089",
                "26323016573465640354175276243081589880",
                "103685761064423878072595439806975759562",
                "225566174294009119589987614874116942002",
                "244316316384380209094476205300538348597",
                "290172646850161493393050899727603495552",
                "292942173183433828662450417191578764231",
                "138102419812461101801027082526518907241",
                "224872967727940357397907681694694793379",
                "142568318795573542167912339948657918596",
                "92777457599492381140482850335781791829",
                "133352957033995847493017633497338847040",
                "261897584233355322557847495577919991550",
                "2640256791728701448032922495721190592",
                "44187311474317145356731491006104531112",
                "246682594166884959501018790535699432529",
                "167497515458090824312342965554098086645",
                "244496912456213124451891951110290472887",
                "186474757704238025028741648545706674529",
                "7007213732095738688581583112564678761",
                "143063134015489403695599420207394340834",
                "63347429099860186309926990947155016776",
                "35824474054277252774023355360970057334",
                "114029067913149336886052787987789309367",
                "261092337127416637096445851074606355726",
                "180200484605766956141686035391390349089",
                "26323016573465640354175276243081589880",
                "103685761064423878072595439806975759562",
                "225566174294009119589987614874116942002",
                "244316316384380209094476205300538348597",
                "290172646850161493393050899727603495552",
                "133358371277550220874466122068691664051",
                "263381642128176281340735980981976570416",
                "2621567026628773442460085933500424416",
                "273199242037160721659195842437237634641",
                "178221364347347817503908618610601572445",
                "115352347975377681162066959183240085321"
            ],
            "threshold": 0.9
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_delete_session_request"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-51909484",
        "signature_version": "v1",
        "digest": {
            "function_hash": "336266084022383087245368612040709136303",
            "length": 2477.0
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_create_session_request"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-5787ae5b",
        "signature_version": "v1",
        "digest": {
            "function_hash": "107790643913313609148032183095104600763",
            "length": 6528.0
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_create_bearer_response"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-8c4b45be",
        "signature_version": "v1",
        "digest": {
            "function_hash": "339727047474247718071653552336486098978",
            "length": 5492.0
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_update_bearer_response"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-a125c778",
        "signature_version": "v1",
        "digest": {
            "function_hash": "316307884848535685909406420248344590098",
            "length": 2939.0
        }
    },
    {
        "signature_type": "Function",
        "target": {
            "file": "src/sgwc/s11-handler.c",
            "function": "sgwc_s11_handle_modify_bearer_request"
        },
        "deprecated": false,
        "source": "https://github.com/open5gs/open5gs/commit/465273d13ba5d47b274c38c9d1b07f04859178a1",
        "id": "CVE-2025-15417-d510d9c2",
        "signature_version": "v1",
        "digest": {
            "function_hash": "278428270364212839091272938925544888859",
            "length": 5231.0
        }
    }
]
source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-15417.json"