SUSE CVE-2014-5163

The APN decode functionality in 1 epan/dissectors/packet-gtp.c and 2 epan/dissectors/packet-gsmagm.c in the GTP and GSM Management dissectors in Wireshark 1.10.x before 1.10.9 does not completely initialize a certain buffer, which allows remote attackers to cause a denial of service application...

SUSE CVE-2015-4652

epan/dissectors/packet-gsmadtap.c in the GSM DTAP dissector in Wireshark 1.12.x before 1.12.6 does not properly validate digit characters, which allows remote attackers to cause a denial of service application crash via a crafted packet, related to the deemergnumlist and debcdnum functions...

SUSE CVE-2015-6245

epan/dissectors/packet-gsmrlcmac.c in the GSM RLC/MAC dissector in Wireshark 1.12.x before 1.12.7 uses incorrect integer data types, which allows remote attackers to cause a denial of service infinite loop via a crafted packet...

SUSE CVE-2015-8728

The Mobile Identity parser in 1 epan/dissectors/packet-ansia.c in the ANSI A dissector and 2 epan/dissectors/packet-gsmacommon.c in the GSM A dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly uses the tvbbcddigtowmempacketstr function, which allows remote attackers to...

SUSE CVE-2016-4417

Off-by-one error in epan/dissectors/packet-gsmabisoml.c in the GSM A-bis OML dissector in Wireshark 1.12.x before 1.12.10 and 2.x before 2.0.2 allows remote attackers to cause a denial of service buffer over-read and application crash via a crafted packet that triggers a 0xff tag value...

SUSE CVE-2016-8595

The gsmparse function in libavcodec/gsmparser.c in FFmpeg before 3.1.5 allows remote attackers to cause a denial of service assert fault via a crafted AVI file...

gsm-plus.ru Cross Site Scripting vulnerability OBB-3098533

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2022-33831

Name of the Vulnerable Software and Affected Versions Linux Kernel versions prior to v5.15.61 Description The issue concerns a fix for wrong queuing behavior in the gsm dlci data output function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

PT-2022-34093

Name of the Vulnerable Software and Affected Versions Linux Kernel versions 3.2 through 5.10.136 Description The issue is related to wrong queuing behavior in the gsm dlci data output function. The actual impact and attack plausibility have not yet been proven. Recommendations For Linux Kernel...

GSD-2022-1005394 tty: n_gsm: add sanity check for gsm->receive in gsm_receive_buf()

tty: ngsm: add sanity check for gsm-receive in gsmreceivebuf This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.15.66 by commit...

GSD-2022-1005219 tty: n_gsm: fix wrong queuing behavior in gsm_dlci_data_output()

tty: ngsm: fix wrong queuing behavior in gsmdlcidataoutput This is an automated ID intended to aid in discovery of potential security vulnerabilities. The actual impact and attack plausibility have not yet been proven. This ID is fixed in Linux Kernel version v5.19.2 by commit...

PT-2022-33652 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.15.61 through v5.15.65 Description: A potential security issue has been identified in the Linux Kernel. The issue is related to the gsm receive buf function, where a sanity check for gsm-receive has been added. The...

PT-2022-33221 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux Kernel versions v5.19.2 through v5.19.8 Description: The issue is related to the n gsm component in the Linux Kernel, where sleeping functions are called from an atomic context. This could potentially lead to security vulnerabilities,...

PT-2022-33220

Name of the Vulnerable Software and Affected Versions Linux Kernel versions v5.19.2 through v5.19.8 Description A potential security issue has been identified in the Linux Kernel, related to the gsm receive buf function. The issue concerns the lack of a sanity check for gsm-receive, which may lea...

CVE-2022-33686

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...

CVE-2022-33686

Exposure of Sensitive Information in GsmAlarmManager prior to SMR Jul-2022 Release 1 allows local attacker to access iccid via log...

SAMSUNG Mobile devices GsmAlarmManager 安全漏洞

Samsung GsmAlarmManager is a timing task for Samsung Samsung mobile devices.An information disclosure vulnerability exists in Samsung GsmAlarmManager, which stems from a lack of protection of sensitive information in GsmAlarmManager, and can be exploited by local attackers to access the ICCID...

gsm-link.ru Cross Site Scripting vulnerability OBB-2760790

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

PT-2025-26042

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.18.0 Description A deadlock and link starvation issue in the outgoing data path of the Linux kernel's n gsm implementation has been resolved. The issue occurred due to the hard coupling of the upper and lower...

new packages: gsm

An update is available for gsm. This update affects Rocky Linux 9. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list For detailed information on changes in this release, see the Rocky Enterprise...