CVE-2023-36998

The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...

CVE-2023-36998

The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...

CVE-2023-36998

The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...

CVE-2023-36998

The NextEPC MME = 1.0.1 fixed in commit a8492c9c5bc0a66c6999cb5a263545b32a4109df contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method. An attacker may send a NAS message containing an oversized Emergency Number List value to the MME to overwrite the...

CVE-2023-36998

The NextEPC MME version 1.0.1 and earlier contains a stack-based buffer overflow vulnerability in the Emergency Number List decoding method . An attacker can exploit this by sending a specially crafted NAS message with an oversized Emergency Number List value to the MME. This allows the attacker ...