ofono vulnerabilities and fixes

Recent CVEs affecting ofono, with upgrade or downgrade steps. 16 tracked.

ofono has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-08-06. Highest priority: CVE-2023-2794 (score 61/100).

• CVE-2024-7547 HIGH 7.8 DOWNGRADE oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability
• CVE-2024-7546 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
• CVE-2024-7545 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
• CVE-2024-7544 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
• CVE-2024-7543 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
• CVE-2024-7542 LOW 3.3 DOWNGRADE oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability
• CVE-2024-7541 LOW 3.3 DOWNGRADE oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability
• CVE-2024-7540 LOW 3.3 DOWNGRADE oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability
• CVE-2024-7539 HIGH 7.8 DOWNGRADE oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability
• CVE-2024-7538 HIGH 7.8 DOWNGRADE oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability
• CVE-2024-7537 MEDIUM 5.5 DOWNGRADE oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability
• CVE-2023-4235 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
• CVE-2023-4234 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
• CVE-2023-4233 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
• CVE-2023-4232 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
• CVE-2023-2794 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux

FAQ

How do I fix ofono vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is ofono being exploited right now?

None of the tracked ofono CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which ofono CVE should I patch first?

CVE-2023-2794 currently ranks highest (61/100): A flaw was found in ofono, an Open Source Telephony on Linux.

RSS feed for ofono · ← Back to latest CVEs