Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 510
Alerts This Week
Warning Icon 1 510

Ubuntu 7141-1: oFono Security Advisory Updates

ubuntu
Calendar Grey December 10, 2024
Scroller Ubuntu
Ubuntu Security Notice USN-7141-1 addresses critical oFono issues causing denial of service. Update recommended.
Several security issues were fixed in oFono.

Summary

Several security issues were fixed in oFono.

Software Description:

- ofono: Mobile telephony stack

Details:

It was discovered that oFono incorrectly handled decoding SMS messages

leading to a stack overflow. A remote attacker could potentially use

this issue to cause a denial of service.

(CVE-2023-2794, CVE-2023-4233, CVE-2023-4234)

Topics%20covered

Topics Covered

No topics assigned

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 24.10
   ofono                           1.31-3ubuntu3.24.10.1

Ubuntu 24.04 LTS
   ofono                           1.31-3ubuntu3.24.04.1

Ubuntu 22.04 LTS
   ofono                           1.31-3ubuntu1.1

Ubuntu 20.04 LTS
   ofono                           1.31-2ubuntu1+esm1
                                   Available with Ubuntu Pro

Ubuntu 18.04 LTS
   ofono                           1.21-1ubuntu1+esm1
                                   Available with Ubuntu Pro

Ubuntu 16.04 LTS
   ofono 1.17.bzr6912+16.04.20160314.3-0ubuntu1+esm1
                                   Available with Ubuntu Pro

After a standard system update you need to restart oFono to make
all the necessary changes.

References

  https://ubuntu.com/security/notices/USN-7141-1

  CVE-2023-2794, CVE-2023-4233, CVE-2023-4234

Severity
critical
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-7141-1

Topics%20covered

Topics Covered

No topics assigned

Package Information

  https://launchpad.net/ubuntu/+source/ofono/1.31-3ubuntu3.24.10.1
  https://launchpad.net/ubuntu/+source/ofono/1.31-3ubuntu3.24.04.1
 

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.