magma vulnerabilities and fixes

Q: How do I fix magma vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Q: Is magma being exploited right now?

None of the tracked magma CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Q: Which magma CVE should I patch first?

CVE-2024-24421 currently ranks highest (68/100): A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802.

Recent CVEs affecting magma, with upgrade or downgrade steps. 22 tracked.

magma has 22 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 22. Most recent: 2025-01-21. Highest priority: CVE-2024-24421 (score 68/100).

CVE-2024-24423 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2024-24422 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2024-24421 CRITICAL 9.8 UPGRADE A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802
CVE-2024-24420 HIGH 7.5 UPGRADE A reachable assertion in the decode_linked_ti_ie function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b83
CVE-2024-24419 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2024-24418 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2024-24417 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2024-24416 HIGH 7.5 UPGRADE The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discov
CVE-2023-37038 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37037 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37036 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37034 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37033 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37032 HIGH 7.5 UPGRADE A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9
CVE-2023-37031 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37030 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37029 HIGH 7.5 UPGRADE Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an
CVE-2023-37028 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37027 MEDIUM 6.5 UPGRADE Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9
CVE-2023-37026 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37025 MEDIUM 6.5 UPGRADE A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.
CVE-2023-37024 HIGH 7.5 UPGRADE A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 0

FAQ

How do I fix magma vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is magma being exploited right now?

None of the tracked magma CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which magma CVE should I patch first?

CVE-2024-24421 currently ranks highest (68/100): A type confusion in the nas_message_decode function of Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802.

RSS feed for magma · ← Back to latest CVEs