CVE-2023-4235
Publication date 17 April 2024
Last updated 24 July 2024
Ubuntu priority
A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().
Status
| Package | Ubuntu Release | Status |
|---|---|---|
| ofono | 24.10 oracular |
Needs evaluation
|
| 24.04 LTS noble |
Needs evaluation
|
|
| 22.04 LTS jammy |
Needs evaluation
|
|
| 20.04 LTS focal |
Needs evaluation
|
|
| 18.04 LTS bionic |
Needs evaluation
|
|
| 16.04 LTS xenial |
Needs evaluation
|
Notes
sbeattie
Fedora seems to think that this was fixed in ofono 2.5; however, while that release does seem to add some additional bounds checks, the specific function referenced has not been touched since 2010. It's not clear if or how this was fixed upstream.