CVE-2025-65567 Denial of service in n/a
An attacker can crash the UPF process by sending a malformed PFCP Session Establishment Request, causing a denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-65567?
CVE-2025-65567 is a high-severity denial of service vulnerability in n/a, published on 18 Dec 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A denial-of-service vulnerability exists in the omec-project UPF (pfcpiface component) in version upf-epc-pfcpiface:2.1.3-dev. After PFCP association, a specially crafted PFCP Session Establishment Request with a CreatePDR that contains a malformed Flow-Description is not robustly validated. The Flow-Description parser (parseFlowDesc) can read beyond the bounds of the provided buffer, causing a panic and terminating the UPF process. An attacker who can send PFCP Session Establishment Request messages to the UPF's N4/PFCP endpoint can exploit this issue to repeatedly crash the UPF.
Weakness: CWE-125
Which versions are affected by CVE-2025-65567?
It affects 1 product.
Products include Opennetworking Upf.
How do I fix CVE-2025-65567?
No fix has been published for CVE-2025-65567 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2025-65567 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2025-65567 exists.
Other vulnerabilities in n/a
Sources
Also known as GHSA-w3v7-wwmg-2j8p.