CVE-2023-37029

Magma versions = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station or via an...

CVE-2024-24418

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodepdnaddress function at /nas/ies/PdnAddress.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24424

Magma contains a vulnerability in the decode_access_point_name_ie function that can trigger a reachable assertion, leading to Denial of Service via a crafted NAS packet. Affected: Magma

CVE-2024-24420

A reachable assertion in the decodelinkedtiie function of Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24423

The CVE-2024-24423 entry describes a buffer overflow in the decode_esm_message_container function of Linux Foundation Magma

CVE-2024-24423

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodeesmmessagecontainer function at /nas/ies/EsmMessageContainer.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a...

CVE-2024-24422

The CVE-2024-24422 vulnerability affects Linux Foundation Magma up to version 1.8.0 and was fixed in v1.9 (commit 08472ba98b8321f802e95f5622fa90fec2dea486). It is caused by a stack overflow in decode_protocol_configuration_options within /3gpp/3gpp_24.008_sm_ies.c, enabling a Denial of Service vi...

CVE-2024-24422

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a stack overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

CVE-2024-24422

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a stack overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

Magma 安全漏洞

Magma is an open source software platform from Magma Open Source. Provides network operators with an open, flexible and scalable mobile core network solution. Magma has a security vulnerability that can be exploited by attackers to cause a denial of service DoS via a carefully crafted NAS packet...

CVE-2024-24419

The Linux Foundation Magma = 1.8.0 fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 was discovered to contain a buffer overflow in the decodetrafficflowtemplatepacketfilter function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service DoS via a...

Open5GS Denial of Service Vulnerability (CNVD-2025-08799)

Open5GS is Open5GS open source an open source implementation in C of 5G Core and Epc, the core network of the Lte/Nr network. Open5GS suffers from a denial of service vulnerability that can be exploited by an attacker to trigger a denial of service DoS via a crafted NAS packet...

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24425

CVE-2024-24425 affects Magma v1.8.0 and OpenAirInterface (OAI) EPC Federation v1.20. It is caused by an out-of-bounds read in amf_as_establish_req (file /tasks/amf/amf_as.cpp) that can allow a attacker to trigger a Denial of Service via specially crafted NAS packets. Multiple sources (Red Hat, SU...

CVE-2024-24431

A reachable assertion in the ogsnasemmdecode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service DoS via a crafted NAS packet with a zero-length EMM message length...

CVE-2024-24431

A reachable assertion in the ogsnasemmdecode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service DoS via a crafted NAS packet with a zero-length EMM message length...

CVE-2024-24425

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amfasestablishreq function at /tasks/amf/amfas.cpp. This vulnerability allows attackers to cause a Denial of Service DoS via a crafted NAS packet...

CVE-2024-24431

Open5GS v2.7.0 is affected by a DoS in the ogs_nas_emm_decode (ogs nas emm decode) function triggered by a crafted NAS packet with a zero-length EMM message length. The issue is a reachable assertion in that function, allowing attackers to cause Denial of Service. No exploit details are provided ...

CVE-2024-24431

A reachable assertion in the ogsnasemmdecode function of Open5GS v2.7.0 allows attackers to cause a Denial of Service DoS via a crafted NAS packet with a zero-length EMM message length...