Magma Mobile Management Entity Stack-Based Buffer Overflow Vulnerability Allowing Denial-of-Service

A stack-based buffer overflow vulnerability has been identified in the Mobile Management Entity (MME) of Magma, affecting versions through 1.8.0. This vulnerability allows remote attackers to crash the MME by sending a NAS packet with an oversized 'Emergency Number List' Information Element, using an unauthenticated cellphone. The issue has been fixed in Magma version 1.9.

Impact

Exploitation of this vulnerability causes a denial-of-service condition by crashing the MME, disrupting cellular communications managed by the MME.

Reproduction

The vulnerability can be reproduced by sending a NAS packet containing an oversized 'Emergency Number List' Information Element to the Magma MME. This can be done using an unauthenticated cellphone, as the vulnerability does not require a valid SIM card.

Remediation

Users can upgrade to Magma version 1.9 or later to address this vulnerability.