CVE-2024-24422: High severity magma vulnerability
The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a stack overflow in the decodeprotocolconfigurationoptions function at /3gpp/3gpp24.008smies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-24422?
CVE-2024-24422 is classified as a high severity vulnerability that can lead to Denial of Service (DoS).
How do I fix CVE-2024-24422?
To fix CVE-2024-24422, upgrade to version 1.9 or later of Linux Foundation Magma, as it contains the necessary patch.
What causes the CVE-2024-24422 vulnerability?
CVE-2024-24422 is caused by a stack overflow in the decode_protocol_configuration_options function in the 3gpp_24.008_sm_ies.c file.
Which versions of Linux Foundation Magma are affected by CVE-2024-24422?
Versions of Linux Foundation Magma that are affected by CVE-2024-24422 are those up to and including version 1.8.0.
What type of attack can exploit CVE-2024-24422?
CVE-2024-24422 can be exploited to launch Denial of Service (DoS) attacks against systems running the affected versions.