CVE-2024-24425

Published November 15th, 2024

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECTS

Description

Magma v1.8.0 and OAI EPC Federation v1.20 were discovered to contain an out-of-bounds read in the amf_as_establish_req function at /tasks/amf/amf_as.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.

magma/magma

Platform for building access networks and modular network services

GitHub

1.83K

openairinterface/openair-epc-fed

Federation of all Open-Air-CN components

GitHub