Stack Overflow Bug in ofono's Decode_Deliver Function Could Lead to SMS Attacks
CVE-2023-2794

8.1HIGH

Key Information:

Vendor

Fedora

Status
Ofono
Fedora
Vendor
CVE Published:
10 April 2024

What is CVE-2023-2794?

A vulnerability exists within Ofono, an open-source telephony framework on Linux, attributed to a stack overflow error occurring in the decode_deliver() function. This issue arises during the SMS decoding process, specifically when the function fails to perform adequate boundary checks while executing a memcpy operation. Attack vectors potentially exploit this flaw via a compromised modem, through interactions with malicious base stations, or by sending crafted SMS messages. While a check is incorporated in the decode_submit() function to mitigate such risks, it is ineffective in the decode_deliver() context, thereby leaving a window for potential exploitation in telecommunications systems.

Affected Version(s)

ofono 2.1

References

https://bugzilla.redhat.com/show_bug.cgi?id=2255387
issue-trackingx_refsource_REDHAT

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

Credit

Red Hat would like to thank Mitch Zakocs (Trend Micro Zero Day Initiative) for reporting this issue.
.