CVE-2024-7544

Source
https://nvd.nist.gov/vuln/detail/CVE-2024-7544
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2024-7544.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2024-7544
Related
Published
2024-08-06T00:15:36Z
Modified
2024-10-12T11:32:42.695083Z
Severity
  • 7.8 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
[none]
Details

oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.

The specific flaw exists within the parsing of STK command PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23457.

References

Affected packages

Debian:11 / ofono

Package

Name
ofono
Purl
pkg:deb/debian/ofono?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31-3
1.31-4

2.*

2.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Debian:12 / ofono

Package

Name
ofono
Purl
pkg:deb/debian/ofono?arch=source

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected

Affected versions

1.*

1.31-3
1.31-4

2.*

2.10-1

Ecosystem specific

{
    "urgency": "not yet assigned"
}

Git / git.kernel.org/pub/scm/network/ofono/ofono.git

Affected ranges

Type
GIT
Repo
https://git.kernel.org/pub/scm/network/ofono/ofono.git
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
89a6b27e2a7f9c228c08e4dc23e8242d68a42545

Affected versions

0.*

0.1
0.10
0.11
0.12
0.13
0.14
0.15
0.16
0.17
0.18
0.19
0.2
0.20
0.21
0.22
0.23
0.24
0.25
0.26
0.27
0.28
0.29
0.3
0.30
0.31
0.32
0.33
0.34
0.35
0.36
0.37
0.38
0.39
0.4
0.40
0.41
0.42
0.43
0.44
0.45
0.46
0.47
0.48
0.49
0.5
0.50
0.51
0.52
0.53
0.6
0.7
0.8
0.9

1.*

1.0
1.1
1.10
1.11
1.12
1.13
1.14
1.15
1.16
1.17
1.18
1.19
1.2
1.20
1.21
1.22
1.23
1.24
1.25
1.26
1.27
1.28
1.29
1.3
1.30
1.31
1.32
1.33
1.34
1.4
1.5
1.6
1.7
1.8
1.9

2.*

2.0
2.1
2.2
2.3