CVE-2026-104593
CVE-2026-104593
This page contains facts from public vulnerability sources. Check the original advisory before updating.
osmo-msc through 1.15.0 contains a stack-based buffer overflow in decode_mme_name() in src/libmsc/sgs_iface.c. This allows a remote attacker to cause a denial of service.
EPSS 0.2% · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
osmo-msc Debian:12
- Versions
- 1.12.0+dfsg1-1
- 1.12.0+dfsg1-2
- 1.13.0+dfsg1-1
- 1.13.0+dfsg1-2
- 1.13.0+dfsg1-3
- 1.16.0+dfsg1-1
- 1.16.0+dfsg1-2
- 1.9.0+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Debian:13
- Versions
- 1.13.0+dfsg1-2
- 1.13.0+dfsg1-3
- 1.16.0+dfsg1-1
- 1.16.0+dfsg1-2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Debian:14
- Versions
- 1.13.0+dfsg1-2
- 1.13.0+dfsg1-3
- 1.16.0+dfsg1-1
- Affected ranges
- ECOSYSTEM: < 1.16.0+dfsg1-2
Update to 1.16.0+dfsg1-2
osmo-msc Ubuntu:20.04:LTS
- Versions
- 1.2.0-3
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Ubuntu:22.04:LTS
- Versions
- 1.6.3+dfsg1-2
- 1.6.3+dfsg1-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Ubuntu:24.04:LTS
- Versions
- 1.9.0+dfsg1-2
- 1.9.0+dfsg1-2build2
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Ubuntu:26.10
- Versions
- 1.13.0+dfsg1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published
osmo-msc Ubuntu:26.04:LTS
- Versions
- 1.13.0+dfsg1-2
- 1.13.0+dfsg1-2build1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published