CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. An open, flexible and scalable mobile core network solution for network operators. A security vulnerability exists in Magma version v1.8.0, which stems from a reachable assertion in a function that allows an attacker to trigger a...

PT-2024-20392 · Unknown · Openairinterface Magma +1

Name of the Vulnerable Software and Affected Versions: OpenAirInterface Magma version 1.8.0 OAI EPC Federation version 1.2.0 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted NGAP packet. This is due to reachable assertions in the NGAP FIND PROTOCOLIE BY ID...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

CVE-2024-24426

CVE-2024-24426 affects OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0. The root cause is reachable assertions in NGAP_FIND_PROTOCOLIE_BY_ID, enabling DoS via a crafted NGAP packet. Mitigations documented in connected sources include (for Magma v1.8.0) disabling the NGAP FIND PROTOCOL...

CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

PT-2024-20391 · Magma +1 · Magma +1

Name of the Vulnerable Software and Affected Versions: Magma version 1.8.0 OAI EPC Federation version 1.20 Description: The issue is related to an out-of-bounds read in the amf as establish req function at /tasks/amf/amf as.cpp. This allows attackers to cause a Denial of Service DoS via a crafted...

magmacultura.com Cross Site Scripting vulnerability OBB-3759292

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

SIKE Broken

SIKE is one of the new algorithms that NIST recently added to the post-quantum cryptography competition. It was just broken, really badly. We present an efficient key recovery attack on the Supersingular Isogeny Diffie­-Hellman protocol SIDH, based on a "glue-and-split" theorem due to Kani. Our...

magma.com.uy Improper Access Control vulnerability

Open Bug Bounty ID: OBB-1105461 Security Researcher geeknik Helped patch 8957 vulnerabilities Received 8 Coordinated Disclosure badges Received 21 recommendations , a holder of 8 badges for responsible and coordinated disclosure, found a security vulnerability affecting magma.com.uy website and i...

magma-tools.com Cross Site Scripting vulnerability

Open Bug Bounty ID: OBB-1031622 Following coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: &nbsp&nbsp&nbsp&nbsp&nbsp&nbspa. verified the vulnerability and confirmed its existence; &nbsp&nbsp&nbsp&nbsp&nbsp&nbspb. notified the website...

Secure Email Service Lavabit Relaunches

Lavabit, the secure email provider that suspended operations in 2013 after the U.S. government asked for its users’ SSL keys, relaunched Friday under a new architecture. Ladar Levison, the service’s owner and operator, announced Lavabit’s return on Inauguration Day, acknowledging that values such...

Lavabit — Encrypted Email Service Once Used by Snowden, Is Back

Texas-based Encrypted Email Service 'Lavabit,' that was forced to shut down in 2013 after not complying with a court order demanding access to SSL keys to snoop on Edward Snowden's emails, is relaunching on Friday. Lavabit CEO Ladar Levison had custody of the service's SSL encryption key that cou...

MAGMA Cardboard VR - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application MAGMA Cardboard VR published at the 'play' market has multiple vulnerabilities...