A heap-based buffer overflow vulnerability in Osmocom osmo-bsc versions 1.0.1 through 1.14.1 poses a significant denial of service risk to mobile network infrastructure.

The software contains a heap-based buffer overflow (CWE-122) within the ipaccess_proxy_read_msg function, which can be triggered by an unauthenticated remote attacker sending specifically crafted IPA frame lengths.

The vulnerability carries a CVSS score of 7.5, reflecting its potential to cause significant service disruption. Successful exploitation results in a crash of the affected service, which in a production telecommunications environment, would lead to localized or widespread loss of connectivity for mobile subscribers and substantial operational downtime.

Immediate Action: Update Osmocom osmo-bsc to version 1.14.1 or later immediately to incorporate the necessary memory safety fixes.

Proactive Monitoring: Monitor system logs for unexpected process terminations or frequent service restarts that may indicate attempted exploitation of the buffer overflow.

Compensating Controls: Implement strict network access control lists to restrict traffic to the BSC (Base Station Controller) interface, ensuring only authorized network elements can communicate with the service.

Public Exploit Available: Unknown

Given the critical nature of core network infrastructure components, this vulnerability represents a high-priority risk. Administrators should prioritize the deployment of the 1.14.1 patch to eliminate the vulnerable code path and prevent potential remote denial of service attacks against the BSC.