MGASA-2025-0063

See a problem?
Please try reporting it to the source first.
Source
https://advisories.mageia.org/MGASA-2025-0063.html
Import Source
https://advisories.mageia.org/MGASA-2025-0063.json
JSON Data
https://api.osv.dev/v1/vulns/MGASA-2025-0063
Upstream
Published
2025-02-13T19:09:12Z
Modified
2026-04-16T04:43:11Z
Summary
Updated ofono packages fix security vulnerabilities
Details

Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver() function. (CVE-2023-2794) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_status_report() function. (CVE-2023-4232) Sms decoder stack-based buffer overflow remote code execution vulnerability within the sms_decode_address_field(). (CVE-2023-4233) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_submit_report() function. (CVE-2023-4234) Sms decoder stack-based buffer overflow remote code execution vulnerability within the decode_deliver_report() function. (CVE-2023-4235)

References
Credits

Affected packages

Mageia:9 / ofono

Package

Name
ofono
Purl
pkg:rpm/mageia/ofono?arch=source&distro=mageia-9

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0 Unknown introduced version / All previous versions are affected
Fixed
2.1-1.1.mga9

Ecosystem specific 

{
    "section": "core"
}

Database specific

source 
"https://advisories.mageia.org/MGASA-2025-0063.json"