Approved changes feed: RSS · Atom

cpe:2.3:a:open5gs:open5gs:2.7.5:*:*:*:*:*:*:*

part: a version: 2.7.5 update: *

VendorOpen5Gs (46057549-a067-5205-be70-0777ed412b1e)
ProductOpen5Gs (5cd42453-8f6c-5ee3-9353-93a20c7017ec)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/openverso/open5gs purl2cpe 2026-06-01 10:13:03.874848
pkg:github/open5gs/open5gs purl2cpe 2026-06-01 10:13:03.874849

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-65559 vulnerable 2026-06-08 07:39:20.910988 Details available
An issue was discovered in Open5GS 2.7.5-49-g465e90f, when processing a PFCP Session Establishment Request (type=50), the UPF crashes with a reachable assertion in `lib/pfcp/context.c` (`ogs_pfcp_object_teid_hash_set`) if the CreatePDR?PDI?F-TEID has CH=1 and the F-TEID address-family flag(s) (IPv4/IPv6) do not match the GTP-U resource family configured for the selected DNN (Network Instance), resulting in a denial of service.
Published: 2025-12-18T00:00:00.000Z
Updated: 2025-12-19T18:01:45.486Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.