M3UAScan

M3UAScan A Scanner for M3UA protocol to detect Sigtran supporting nodes M3UA stands for MTP Level 3 MTP3 User Adaptation Layer as defined by the IETF SIGTRAN working group in RFC 4666 .M3UA enables the SS7 protocol's User Parts e.g. ISUP, SCCP and TUP to run over IP instead of telephony equipment...

CVE-2026-104598

A flaw was found in libosmo-sigtran. An out-of-bounds read vulnerability exists in the MTP3 User Adaptation Layer M3UA NOTIFY message decoder. A remote attacker can exploit this flaw by sending a specially crafted message to the service, causing it to read beyond allocated memory boundaries...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

Linux Distros Unpatched Vulnerability : CVE-2026-104598

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive...

SUSE CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

DEBIAN-CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

UBUNTU-CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

Official Osmocom mirror libosmo-sigtran security vulnerability

An security vulnerability exists in official Osmocom mirrors libosmo-sigtran versions 2.2.1 and earlier. This vulnerability stems from an out-of-bounds read in the M3UA NOTIFY decoder within src/m3ua.c, potentially allowing remote attackers to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

PT-2026-125098

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

EUVD-2026-110095

libosmo-sigtran through 2.2.1 contains an out-of-bounds read in the M3UA NOTIFY decoder in src/m3ua.c. This allows a remote attacker to obtain sensitive information...

CVE-2026-104598

The libosmo-sigtran library, specifically versions through 2.2.1 , is vulnerable to an out-of-bounds read within the M3UA NOTIFY decoder located in src/m3ua.c. This security flaw allows a remote attacker to obtain sensitive information. While the vulnerability is documented across multiple distri...

EUVD-2014-2320

Malware in sbrugna...

SUSE CVE-2014-2282

The dissectprotocoldataparameter function in epan/dissectors/packet-m3ua.c in the M3UA dissector in Wireshark 1.10.x before 1.10.6 does not properly allocate memory, which allows remote attackers to cause a denial of service application crash via a crafted SS7 MTP3 packet...

Mageia: Security Advisory (MGASA-2014-0126)

The remote host is missing an update for the SPDX-FileCopyrightText: 2022 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...