Analysis
Analysis and contextual insights are available on OpenCVE Cloud.
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| n/a | n/a | affected |
|
No data.
No data available yet.
No vendor fix or workaround currently provided.
Additional remediation guidance may be available on OpenCVE Cloud.
Tracking
Sign in to view the affected projects.
No advisories yet.
| Link | Providers |
|---|---|
| https://cellularsecurity.org/ransacked |
|
Mon, 27 Jan 2025 15:00:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| First Time appeared |
Linuxfoundation
Linuxfoundation magma |
|
| CPEs | cpe:2.3:a:linuxfoundation:magma:*:*:*:*:*:*:*:* | |
| Vendors & Products |
Linuxfoundation
Linuxfoundation magma |
Thu, 23 Jan 2025 15:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Weaknesses | CWE-476 | |
| Metrics |
cvssV3_1
|
Tue, 21 Jan 2025 23:15:00 +0000
| Type | Values Removed | Values Added |
|---|---|---|
| Description | A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field. | |
| References |
|
MITRE
Status: PUBLISHED
Assigner: mitre
Published:
Updated: 2025-03-24T17:28:12.226Z
Reserved: 2023-06-28T00:00:00.000Z
Link: CVE-2023-37034
Vulnrichment
Updated: 2025-01-23T15:06:41.247Z
NVD
Status : Modified
Published: 2025-01-21T23:15:10.703
Modified: 2025-03-24T18:15:17.910
Link: CVE-2023-37034
Redhat
No data.
OpenCVE Enrichment
No data.