CVE-2023-4235

Publication date 17 April 2024

Last updated 12 December 2024

Ubuntu priority

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().

Read the notes from the security team

Status

Show unmaintained releases

Package	Ubuntu Release	Status
ofono	24.10 oracular	Fixed 1.31-3ubuntu3.24.10.2
	24.04 LTS noble	Fixed 1.31-3ubuntu3.24.04.2
	23.10 mantic	Ignored end of life, was needs-triage
	22.04 LTS jammy	Fixed 1.31-3ubuntu1.2
	20.04 LTS focal	Fixed 1.31-2ubuntu1+esm2 Ubuntu Pro
	18.04 LTS bionic	Fixed 1.21-1ubuntu1+esm2 Ubuntu Pro
	16.04 LTS xenial	Fixed 1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm2 Ubuntu Pro

Get expanded security coverage with Ubuntu Pro

Reduce your average CVE exposure time from 98 days to 1 day with expanded CVE patching, ten-years security maintenance and optional support for the full stack of open-source applications. Free for personal use.

Get Ubuntu Pro

Notes

sbeattie

Fedora seems to think that this was fixed in ofono 2.5; however, while that release does seem to add some additional bounds checks, the specific function referenced has not been touched since 2010. It's not clear if or how this was fixed upstream.

References

Related Ubuntu Security Notices (USN)