CVE-2024-24417: Buffer Overflow
The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24417?
CVE-2024-24417 has been rated as a high severity vulnerability due to its potential to cause Denial of Service (DoS).
How do I fix CVE-2024-24417?
To fix CVE-2024-24417, upgrade the Linux Foundation Magma software to version 1.9 or later, which contains the necessary patches.
What kind of attacks can be executed using CVE-2024-24417?
CVE-2024-24417 allows attackers to exploit a buffer overflow, potentially crashing the system and causing a Denial of Service.
Which versions of Linux Foundation Magma are affected by CVE-2024-24417?
CVE-2024-24417 affects all versions of Linux Foundation Magma up to and including 1.8.0.
Where is the vulnerability CVE-2024-24417 located in the software?
The vulnerability CVE-2024-24417 is located in the decode_protocol_configuration_options function within the file 3gpp_24.008_sm_ies.c.