PatchTheCVEofono project vulnerabilities
Recent CVEs affecting ofono project products. 16 tracked.
ofono project has 16 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2024-08-06. Highest priority: CVE-2023-2794 (score 61/100).
- CVE-2024-7547 HIGH 7.8 DOWNGRADE oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7546 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7545 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7544 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7543 HIGH 7.8 DOWNGRADE oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability
- CVE-2024-7542 LOW 3.3 DOWNGRADE oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7541 LOW 3.3 DOWNGRADE oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7540 LOW 3.3 DOWNGRADE oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability
- CVE-2024-7539 HIGH 7.8 DOWNGRADE oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability
- CVE-2024-7538 HIGH 7.8 DOWNGRADE oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability
- CVE-2024-7537 MEDIUM 5.5 DOWNGRADE oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability
- CVE-2023-4235 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
- CVE-2023-4234 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
- CVE-2023-4233 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
- CVE-2023-4232 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
- CVE-2023-2794 HIGH 8.1 UPGRADE MITIGATE A flaw was found in ofono, an Open Source Telephony on Linux
FAQ
How do I fix ofono project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is ofono project being exploited right now?
None of the tracked ofono project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which ofono project CVE should I patch first?
CVE-2023-2794 currently ranks highest (61/100): A flaw was found in ofono, an Open Source Telephony on Linux.