Cloud Vulnerability DB
A community-led vulnerabilities database
Vulnerability DatabaseCVE-2024-24423
CVE-2024-24423:
NixOS vulnerability analysis and mitigation
Overview
The Linux Foundation Magma <= 1.8.0 was discovered to contain a buffer overflow vulnerability in the decode_esm_message_container function at /nas/ies/EsmMessageContainer.cpp. This vulnerability was fixed in v1.9 commit 08472ba98b8321f802e95f5622fa90fec2dea486 (Debian Security).
Technical details
The vulnerability exists in the decode_esm_message_container function within the NAS protocol implementation. It allows attackers to trigger a buffer overflow condition through a specially crafted NAS packet. The issue was assigned a CVE identifier CVE-2024-24423 and affects versions up to and including Magma 1.8.0 (Debian Security).
Impact
When successfully exploited, this vulnerability enables attackers to cause a Denial of Service (DoS) condition in the affected system via a crafted NAS packet (Debian Security).
Mitigation and workarounds
The vulnerability has been fixed in Magma version 1.9 with commit 08472ba98b8321f802e95f5622fa90fec2dea486. Users are advised to upgrade to this version or later to mitigate the vulnerability (Debian Security).
Additional resources
Source: This report was generated using AI
Related NixOS vulnerabilities:
Free Vulnerability Assessment
Benchmark your Cloud Security Posture
Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.
Additional Wiz resources
Get a personalized demo
Ready to see Wiz in action?
"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management