PT-2023-7966 · Ofono+4 · Ofono+4

Sandipan Roy · Publicado 2023-05-10 · Atualizado 2025-08-07 · CVE-2023-4233

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ofono (affected versions not specified)

Description A flaw was found in ofono, an Open Source Telephony on Linux, where a stack overflow bug is triggered within the sms decode address field() function during the SMS PDU decoding. This issue can be exploited remotely, potentially allowing an attacker to execute arbitrary code. The attack scenario is assumed to be accessible from a compromised modem, a malicious base station, or just SMS.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Stack Overflow

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-121

CWE-20

CWE-119

Identificadores relacionados

BDU:2023-09050

CVE-2023-4233

MGASA-2025-0063

USN-7141-1

ZDI-23-1859

Produtos afetados

Astra Linux

Debian

Linuxmint

Ubuntu

Ofono

Referências · 30

• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Aviso do Fabricante
• https://ubuntu.com/security/CVE-2023-4233 · Aviso do Fabricante
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T · Aviso do Fabricante
• https://bugs.mageia.org/show_bug.cgi?id=33841 · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-4233 · Aviso do Fabricante
• https://t.me/cvenotify/77241 · Publicação no Telegram
• https://security-tracker.debian.org/tracker/CVE-2023-4233 · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-4233 · Aviso do Fabricante
• https://osv.dev/vulnerability/USN-7141-1 · Aviso do Fabricante
• https://ubuntu.com/security/notices/USN-7151-1 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2023-4233 · Nota de Segurança
• https://cve.omp.ru/bb24402 · Nota
• https://bdu.fstec.ru/vul/2023-09050 · Nota de Segurança
• https://lists.fedoraproject.org/archives/list/[e-mail]/message/VG6FHQITWUNHBDGPXUQ77SZK5O5BYIBZ · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2023-4233 · Aviso do Fabricante