CVE-2025-56568

{
  "id": "CVE-2025-56568",
  "sourceIdentifier": "[email protected]",
  "published": "2026-04-30T20:16:23.220",
  "lastModified": "2026-11-04T20:10:00.263",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Assertion failure vulnerability in the PCO (Protocol Configuration Options) parser in the SMF (Session Management Function) component of Open5GS before v2.7.5 allows remote attackers to cause denial of service via specially crafted NGAP messages containing malformed length fields in protocol configuration data."
    },
    {
      "lang": "es",
      "value": "Vulnerabilidad de fallo de aserción en el analizador de PCO (Opciones de Configuración de Protocolo) en el componente SMF (Función de Gestión de Sesión) de Open5GS anterior a la v2.7.5 permite a atacantes remotos causar denegación de servicio mediante mensajes NGAP especialmente diseñados que contienen campos de longitud malformados en los datos de configuración del protocolo."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "version": "n/a",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
          "baseScore": 7.5,
          "baseSeverity": "HIGH",
          "attackVector": "NETWORK",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "NONE",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 3.6
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-04T15:01:21.477256Z",
          "id": "CVE-2025-56568",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "yes"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-617"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/open5gs/open5gs/commit/d7707879c943d2c952235382154d835b5849d54e",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/open5gs/open5gs/issues/3969",
      "source": "[email protected]"
    }
  ]
}