Threats tagged 'ghsa-5p56-5h9g-2gjv'

A heap-based buffer overflow vulnerability exists in the osmo-bsc component of Osmocom in versions from 1.0.1 up to but not including 1.14.1. The flaw is located in the ipaccess_proxy_read_msg() function and is triggered by malformed IPA frame lengths. This vulnerability can cause a denial of service by crashing the application but does not impact confidentiality or integrity.