exploitDog

GHSA-jj8f-p8pv-qqm3

Опубликовано: 22 янв. 2025

Источник: github

Github: Не прошло ревью

CVSS3: 6.5

Описание

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP E-RAB Modification Indication packet missing an expected eNB_UE_S1AP_ID field.

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP E-RAB Modification Indication packet missing an expected eNB_UE_S1AP_ID field.

Ссылки

EPSS

Процентиль: 33%

0.00133

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-476

Связанные уязвимости

CVE-2023-37027

CVSS3: 6.5

nvd

около 1 года назад

Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field.

EPSS

Процентиль: 33%

0.00133

Низкий

6.5 Medium

CVSS3

CVE ID

Дефекты

CWE-476