high8.1
CVE-2023-4233
A flaw was found in ofono, an Open Source Telephony on Linux.
Impact
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ofono Project | Ofono | before 2.1 |
| Fedoraproject | Fedora | Versions 38, 39, 40 |
Weakness classification
References
- NVD record
- CVE.org record
- https://bugzilla.redhat.com/show_bug.cgi?id=2255396
- https://bugzilla.redhat.com/show_bug.cgi?id=2255396
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T/
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/VG6FHQITWUNHBDGPXUQ77SZK5O5BYIBZ/