Linuxfoundation

Magma

28 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.5

CVE-2024-24416

Exploit
  • EPSS 0.6%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 15.03.2025 15:15:37

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attac...

7.5

CVE-2024-24419

Exploit
  • EPSS 0.6%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 18.03.2025 21:15:23

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_traffic_flow_template_packet_filter function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerabili...

7.5

CVE-2024-24418

Exploit
  • EPSS 0.6%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 24.03.2025 18:15:18

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to caus...

7.5

CVE-2024-24417

Exploit
  • EPSS 0.6%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 14.03.2025 17:15:42

The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability al...

6.5

CVE-2023-37038

Exploit
  • EPSS 0.38%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 13.03.2025 20:15:15

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` pac...

6.5

CVE-2023-37037

Exploit
  • EPSS 0.38%
  • Veröffentlicht 21.01.2025 23:15:11
  • Zuletzt bearbeitet 18.03.2025 14:15:36

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet m...

6.5

CVE-2023-37036

Exploit
  • EPSS 0.38%
  • Veröffentlicht 21.01.2025 23:15:10
  • Zuletzt bearbeitet 18.03.2025 21:15:23

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` pac...

6.5

CVE-2023-37034

Exploit
  • EPSS 0.38%
  • Veröffentlicht 21.01.2025 23:15:10
  • Zuletzt bearbeitet 24.03.2025 18:15:17

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packe...

6.5

CVE-2023-37033

Exploit
  • EPSS 0.38%
  • Veröffentlicht 21.01.2025 23:15:10
  • Zuletzt bearbeitet 20.03.2025 14:15:15

A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packe...

7.5

CVE-2023-37032

Exploit
  • EPSS 0.77%
  • Veröffentlicht 21.01.2025 23:15:10
  • Zuletzt bearbeitet 13.03.2025 15:15:38

A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS...