Auto-Update: 2025-01-22T00:55:20.260098+00:00

fkie-cad · Jan 22, 2025 · 6c35f4d · 6c35f4d
1 parent c0ba651
commit 6c35f4d
Show file tree

Hide file tree

Showing 58 changed files with 1,389 additions and 222 deletions.
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37024.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37024.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37024",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:09.500",
+  "lastModified": "2025-01-21T23:15:09.500",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A reachable assertion in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an `Emergency Number List` Information Element."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37025.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37025.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37025",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:09.623",
+  "lastModified": "2025-01-21T23:15:09.623",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Reset` packet missing an expected `ResetType` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37026.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37026.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37026",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:09.747",
+  "lastModified": "2025-01-21T23:15:09.747",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Release Response` packet missing an expected `MME_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37027.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37027.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37027",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:09.880",
+  "lastModified": "2025-01-21T23:15:09.880",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37028.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37028.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37028",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.000",
+  "lastModified": "2025-01-21T23:15:10.000",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `E-RAB Modification Indication` packet missing an expected `eNB_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37029.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37029.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37029",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.117",
+  "lastModified": "2025-01-21T23:15:10.117",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) are susceptible to an assertion-based crash when an oversized NAS packet is received. An attacker may leverage this behavior to repeatedly crash the MME via either a compromised base station or via an unauthenticated cellphone within range of a base station managed by the MME, causing a denial of service."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37030.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37030.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37030",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.247",
+  "lastModified": "2025-01-21T23:15:10.247",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `eNB_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37031.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37031.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37031",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.363",
+  "lastModified": "2025-01-21T23:15:10.363",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `eNB Configuration Transfer` packet missing its required `Target eNB ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37032.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37032.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37032",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.473",
+  "lastModified": "2025-01-21T23:15:10.473",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Stack-based buffer overflow in the Mobile Management Entity (MME) of Magma versions <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows remote attackers to crash the MME with an unauthenticated cellphone by sending a NAS packet containing an oversized `Emergency Number List` Information Element."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37033.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37033.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37033",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.580",
+  "lastModified": "2025-01-21T23:15:10.580",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `EUTRAN_CGI` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37034.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37034.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37034",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.703",
+  "lastModified": "2025-01-21T23:15:10.703",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `TAI` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37035.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37035.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37035",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.823",
+  "lastModified": "2025-01-21T23:15:10.823",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Global eNB ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37036.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37036.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37036",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:10.970",
+  "lastModified": "2025-01-21T23:15:10.970",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `ENB_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37037.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37037.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37037",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:11.080",
+  "lastModified": "2025-01-21T23:15:11.080",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `S1Setup Request` packet missing an expected `Supported TAs` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37038.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37038.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37038",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:11.203",
+  "lastModified": "2025-01-21T23:15:11.203",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allows network-adjacent attackers to crash the MME via an S1AP `Uplink NAS Transport` packet missing an expected `MME_UE_S1AP_ID` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-370xx/CVE-2023-37039.json b/CVE-2023/CVE-2023-370xx/CVE-2023-37039.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-37039",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-22T00:15:15.683",
+  "lastModified": "2025-01-22T00:15:15.683",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "A Null pointer dereference vulnerability in the Mobile Management Entity (MME) in Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) allow network-adjacent attackers to crash the MME via an S1AP `Initial UE Message` packet missing an expected `RRC Establishment Clause` field."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://cellularsecurity.org/ransacked",
+      "source": "[email protected]"
+    }
+  ]
+}
diff --git a/CVE-2023/CVE-2023-401xx/CVE-2023-40108.json b/CVE-2023/CVE-2023-401xx/CVE-2023-40108.json
@@ -0,0 +1,21 @@
+{
+  "id": "CVE-2023-40108",
+  "sourceIdentifier": "[email protected]",
+  "published": "2025-01-21T23:15:11.320",
+  "lastModified": "2025-01-21T23:15:11.320",
+  "vulnStatus": "Received",
+  "cveTags": [],
+  "descriptions": [
+    {
+      "lang": "en",
+      "value": "In multiple locations, there is a possible way to access media content belonging to another user due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation."
+    }
+  ],
+  "metrics": {},
+  "references": [
+    {
+      "url": "https://source.android.com/security/bulletin/2025-01-01",
+      "source": "[email protected]"
+    }
+  ]
+}