CVE-2024-24426

Reachable assertions in the NGAPFINDPROTOCOLIEBYID function of OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 allow attackers to cause a Denial of Service DoS via a crafted NGAP packet...

GO-2024-3273 CVE-2024-24426 in github.com/magma/magma

CVE-2024-24426 in github.com/magma/magma...

CVE-2024-24426

The OpenAirInterface Magma v1.8.0 and OAI EPC Federation v1.2.0 software are vulnerable to a Denial of Service (DoS) attack. The root cause is reachable assertions within the NGAP_FIND_PROTOCOLIE_BY_ID function, which can be triggered by an attacker sending a crafted NGAP packet . To mitigate thi...