CVE-2023-4232 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function
HighCVSS 8.1
EPSS 0.96%
- Published
- Updated
- Exploit status
- No public exploit known
Description
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/ofono(Debian:12) | All versions | No fix listed |
| debian/ofono(Debian:12) | = 1.31-3 | No fix listed |
| debian/ofono(Debian:12) | = 1.31-4 | No fix listed |
| debian/ofono(Debian:12) | = 2.10-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.11-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.12-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.14-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.16-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.16-2 | No fix listed |
| debian/ofono(Debian:12) | = 2.16-3 | No fix listed |
| debian/ofono(Debian:12) | = 2.16-4 | No fix listed |
| debian/ofono(Debian:12) | = 2.16-5 | No fix listed |
| debian/ofono(Debian:12) | = 2.18-1 | No fix listed |
| debian/ofono(Debian:12) | = 2.18-2 | No fix listed |
| debian/ofono(Debian:12) | = 2.19-1 | No fix listed |
| debian/ofono(Debian:13) | < 2.14-1 | 2.14-1 |
| debian/ofono(Debian:14) | < 2.14-1 | 2.14-1 |
| Fedora | All versions | No fix listed |
| ubuntu/ofono(Ubuntu:22.04) | < 1.31-3ubuntu1.2 | 1.31-3ubuntu1.2 |
| ubuntu/ofono(Ubuntu:24.04) | < 1.31-3ubuntu3.24.04.2 | 1.31-3ubuntu3.24.04.2 |
| ofono project ofono | < 2.1 | 2.1 |
| fedoraproject fedora | = 39 | No fix listed |
| fedoraproject fedora | = 40 | No fix listed |
| ubuntu/ofono(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/ofono(Ubuntu:26.10) | All versions | No fix listed |
References
- Debian Security Tracker CVE-2023-4232 vendor-advisory
- RHBZ#2255394 exploit issue-tracking third-party-advisory
- lists.fedoraproject.org
- Ubuntu CVE tracker vendor-advisory
- USN-7151-1 vendor-advisory
- www.cve.org
- bugs.debian.org issue-tracking