Summary
It was discovered that oFono incorrectly handled crafted responses
from AT commands. An attacker could possibly use this issue to crash
the program, resulting in a denial of service or arbitrary code
execution. (CVE-2024-7538, CVE-2024-7539, CVE-2024-7540, CVE-2024-7541,
CVE-2024-7542)
Lucas Leong discovered that oFono incorrectly handled crafted input.
An attacker could possibly use this issue to crash the program,
resulting in a denial of service or arbitrary code execution.
(CVE-2024-7543, CVE-2024-7544, CVE-2024-7545, CVE-2024-7546,
CVE-2024-7547)
Fixed packages 5
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | ofono | 1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm3 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | ofono | 1.21-1ubuntu1+esm3 |
| Ubuntu · Pro 20.04 LTS Pro:20.04:LTS | ofono | 1.31-2ubuntu1+esm3 |
| Ubuntu · Pro 22.04 LTS Pro:22.04:LTS | ofono | 1.31-3ubuntu1.2+esm1 |
| Ubuntu · Pro 24.04 LTS Pro:24.04:LTS | ofono | 1.31-3ubuntu3.24.04.2+esm1 |
References
-
report
https://ubuntu.com/security/CVE-2024-7538
-
report
https://ubuntu.com/security/CVE-2024-7539
-
report
https://ubuntu.com/security/CVE-2024-7540
-
report
https://ubuntu.com/security/CVE-2024-7541
-
report
https://ubuntu.com/security/CVE-2024-7542
-
report
https://ubuntu.com/security/CVE-2024-7543
-
report
https://ubuntu.com/security/CVE-2024-7544
-
report
https://ubuntu.com/security/CVE-2024-7545
-
report
https://ubuntu.com/security/CVE-2024-7546
-
report
https://ubuntu.com/security/CVE-2024-7547