Lucene search

FedoraCVELIST:CVE-2023-4233

HistoryApr 17, 2024 - 10:50 p.m.

CVE-2023-4233 Ofono: sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field() function

2024-04-1722:50:49

CWE-119

fedora

raw.githubusercontent.com

ofono

buffer overflow

sms decoder

cve-2023-4233

remote code execution

vulnerability

stack-based

sms

pdu decoding

open source telephony

linux

attack scenario

compromised modem

malicious base station

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

48.0%

JSON

A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.