Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2023-4233

Опубликовано: 17 апр. 2024
Источник: nvd
CVSS3: 8.1
EPSS Низкий

Описание

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:ofono_project:ofono:*:*:*:*:*:*:*:*
Версия до 2.1 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*
cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*

EPSS

Процентиль: 35%
0.00145
Низкий

8.1 High

CVSS3

Дефекты

CWE-119
CWE-119

Связанные уязвимости

CVSS3: 8.1
ubuntu
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

CVSS3: 8.1
debian
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack ...

CVSS3: 8.1
github
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

CVSS3: 8.1
fstec
больше 2 лет назад

Уязвимость функции sms_decode_address_field() стека мобильной телефонии oFono, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 35%
0.00145
Низкий

8.1 High

CVSS3

Дефекты

CWE-119
CWE-119