Skip to main content

Threats Tagged 'cve-2024-14043'

View all threats tagged with 'cve-2024-14043'. Filter and sort to focus on specific types of threats.

Pro Console Lifetime

Stop chasing alerts. Route them.

Start free, then upgrade once to turn Radar into an automated delivery engine for your security stack.

Custom feeds / Automations: email, Slack, webhooks, SIEM/MISP / API access (baseline limits)

View Plans & Pricing

API access activates after upgrading in Console -> Billing.

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now

Filter Threats

Narrow down the results by type, severity, or affected countries

Search threats by title, CVE ID, or description. Maximum 100 characters.
Active filters (1):Tag: cve-2024-14043

Threats Tagged 'cve-2024-14043'

Click on any threat for detailed analysis and mitigation recommendations

A heap-based buffer overflow vulnerability exists in Open5GS up to version 2.7.1 in the Diameter S6a Interface component. The flaw is in the mme_s6a_subscription_data_from_avp function, where manipulation of the msisdn_len argument can lead to memory corruption. This vulnerability can be exploited remotely. The issue is fixed in Open5GS version 2.7.2.

Join the discussion
0

A vulnerability was determined in Open5GS up to 2.7.1. This vulnerability affects the function mme_s6a_subscription_data_from_avp of the file src/mme/mme-fd-path.c of the component Diameter S6a Interface. Executing a manipulation of the argument msisdn_len can lead to heap-based buffer overflow. It is possible to launch the attack remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.7.2 is able to resolve this issue. This patch is called 7ea82cb87bb65c3694d8d7c7a5efed1c4d3c9304. Upgrading the affected component is recommended.

Join the discussion

Showing 1 to 2 of 2 results

Filters:Tag: cve-2024-14043
Page 1 of 1
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses