CVE-2024-24417 in Magma
Summary
by MITRE • 01/22/2025
The Linux Foundation Magma <= 1.8.0 (fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486) was discovered to contain a buffer overflow in the decode_protocol_configuration_options function at /3gpp/3gpp_24.008_sm_ies.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted NAS packet.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Analysis
by VulDB Data Team • 06/08/2025
The vulnerability identified as CVE-2024-24417 affects the Linux Foundation Magma platform version 1.8.0 and earlier, representing a critical buffer overflow condition within the protocol configuration options decoding functionality. This flaw exists in the specific file /3gpp/3gpp_24.008_sm_ies.c and manifests during the processing of NAS (Non-Access Stratum) packets, which are fundamental to 3GPP mobile network communications. The issue stems from inadequate input validation and memory management within the decode_protocol_configuration_options function, creating a scenario where maliciously crafted packets can trigger unexpected behavior in the system's memory handling mechanisms.
The technical exploitation of this vulnerability occurs when the system processes a specially crafted NAS packet that contains malformed protocol configuration options data. The buffer overflow vulnerability allows an attacker to write beyond the allocated memory boundaries of the function's internal buffers, potentially causing memory corruption that leads to system instability. This condition specifically impacts the 3GPP 24.008 specification implementation within the Magma platform, which handles session management information elements essential for mobile network operations. The flaw operates at the protocol parsing layer where the system attempts to decode and process session management messages, making it particularly dangerous as it can affect core network functions.
The operational impact of this vulnerability extends to service availability and network reliability, as successful exploitation results in a denial of service condition that can disrupt mobile network operations. When the buffer overflow occurs during NAS packet processing, the affected Magma components may crash or become unresponsive, leading to interrupted service for mobile subscribers and potential network degradation. This vulnerability particularly affects network infrastructure components that rely on Magma for 3GPP protocol handling, including but not limited to MME (Mobility Management Entity) and other session management functions. The DoS condition can be triggered remotely by any entity capable of sending crafted NAS packets to the affected system, making it a significant risk to network availability and subscriber service continuity.
Security mitigations for CVE-2024-24417 should prioritize immediate deployment of the fixed version v1.9 with the specific commit 08472ba98b8321f802e95f5622fa90fec2dea486 that addresses the buffer overflow condition. Network operators should implement monitoring for unusual NAS packet patterns and establish intrusion detection systems to identify potential exploitation attempts. The fix typically involves proper bounds checking and memory allocation strategies within the decode_protocol_configuration_options function, aligning with secure coding practices recommended by CWE-121 and CWE-122 which address stack and heap buffer overflows. Additionally, implementing network segmentation and access controls around Magma components can limit the attack surface and prevent unauthorized entities from sending malicious packets to vulnerable systems. Organizations should also consider implementing rate limiting and packet validation mechanisms to further reduce the risk of exploitation and maintain service availability during potential attack scenarios.