Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2023-4233

Опубликовано: 17 апр. 2024
Источник: ubuntu
Приоритет: medium
CVSS3: 8.1

Описание

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

РелизСтатусПримечание
devel

needs-triage

esm-apps/bionic

released

1.21-1ubuntu1+esm1
esm-apps/focal

released

1.31-2ubuntu1+esm1
esm-apps/jammy

released

1.31-3ubuntu1.1
esm-apps/noble

released

1.31-3ubuntu3.24.04.1
esm-apps/xenial

released

1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm1
focal

ignored

end of standard support, was needed
jammy

released

1.31-3ubuntu1.1
mantic

ignored

end of life, was needs-triage
noble

released

1.31-3ubuntu3.24.04.1

Показывать по

8.1 High

CVSS3

Связанные уязвимости

CVSS3: 8.1
nvd
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

CVSS3: 8.1
debian
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack ...

CVSS3: 8.1
github
почти 2 года назад

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.

CVSS3: 8.1
fstec
больше 2 лет назад

Уязвимость функции sms_decode_address_field() стека мобильной телефонии oFono, позволяющая нарушителю выполнить произвольный код

8.1 High

CVSS3