CVE-2023-2794: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding…

PriorityP349high8.1CVSS 3.1

AVNACHPRNUINSUCHIHAH

EPSS

1.24%

65.8th percentile

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().

Affected

11 ranges

Vendor	Product	Version range	Fixed in
debian	ofono	< ofono 1.31-4 (forky)	ofono 1.31-4 (forky)
fedoraproject	fedora	—	—
fedoraproject	fedora	—	—
ofono_project	ofono	< 2.5	2.5
ofono_project	ofono	>= 0 < 1.31-4	1.31-4
ofono_project	ofono	>= 0 < 1.31-4	1.31-4
ofono_project	ofono	>= 0 < 1.31-3ubuntu1.1	1.31-3ubuntu1.1
ofono_project	ofono	>= 0 < 1.31-3ubuntu3.24.04.1	1.31-3ubuntu3.24.04.1
ofono_project	ofono	>= 0 < 1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm1	1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm1
ofono_project	ofono	>= 0 < 1.21-1ubuntu1+esm1	1.21-1ubuntu1+esm1
ofono_project	ofono	>= 0 < 1.31-2ubuntu1+esm1	1.31-2ubuntu1+esm1

CVSS provenance

nvdv3.18.1HIGHCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

osv8.1HIGH

vendor_debian8.1HIGH

vendor_ubuntu8.1HIGH

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.