Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

Magma <= 1.8.0 Can Crash: Malicious Network Packet

CVE-2024-24424 · published 1 year ago
Summary

If you're running Magma 1.8.0 or earlier, a malicious network packet could crash the system. This is a concern because it could disrupt your operations. To fix this, update to Magma 1.9 or later.

Original advisory text
A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (Do...
A reachable assertion in the decode_access_point_name_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-400Uncontrolled Resource Consumption
Timeline
Published21 Jan 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2024-24424 · NVD
Track software like this
Free during beta