Magma vulnerabilities | LiveThreat CVE Feed

Product

Magma

by Linuxfoundation · last CVE Jan 21, 2025

CVEs

On KEV

9.8

Max CVSS

New 30D

Vulnerabilities22 In the news0 Timeline

Severity mix

Critical 1High 10Medium 11Low 0

Severity

All severities22 Critical1 High10 Medium11 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Magma to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-24421	9.8	1%	Jan 21	A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to execute arbitrary code or… Affected: through 1.8.0
CVE-2024-24423	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_esm_message_container… Affected: through 1.8.0
CVE-2024-24422	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the… Affected: through 1.8.0
CVE-2024-24420	7.5	1%	Jan 21	A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of… Affected: through 1.8.0
CVE-2024-24419	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the… Affected: through 1.8.0
CVE-2024-24418	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_pdn_address function… Affected: through 1.8.0
CVE-2024-24417	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the… Affected: through 1.8.0
CVE-2024-24416	7.5	1%	Jan 21	The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_access_point_name_ie… Affected: through 1.8.0
CVE-2023-37032	7.5	1%	Jan 21	A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote… Affected: through 1.8.0
CVE-2023-37029	7.5	1%	Jan 21	Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received Affected: through 1.8.0
CVE-2023-37024	7.5	1%	Jan 21	A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to… Affected: before 1.9
CVE-2023-37038	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37037	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37036	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37034	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37033	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37031	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37030	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: through 1.8.0
CVE-2023-37028	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: before 1.9
CVE-2023-37027	6.5	0%	Jan 21	Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: before 1.9
CVE-2023-37026	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: before 1.9
CVE-2023-37025	6.5	0%	Jan 21	A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows… Affected: before 1.9