Ofono
Vendor:
First CVE: Apr 10, 2024 · Active for 2 years
16
Total CVEs
More Total CVEs than 92% of tracked products
16.0
Avg CVEs / Year
Higher CVE frequency than 98% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Ofono over time
Volume of CVEsAvg CVSS Base Score
First CVE
Apr 10, 2024
2 years ago
Most Recent CVE
Aug 6, 2024
719 days ago
CVE Severity & Scoring
Ofono16 CVEs
19%
75%
All CVEs352,719 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local11 (68.8%)
Network5 (31.3%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low11 (68.8%)
High5 (31.3%)
Unknown0 (0.0%)
User Interaction
None16 (100.0%)
Unknown0 (0.0%)
Required0 (0.0%)
Privileges Required
Low11 (68.8%)
High0 (0.0%)
None5 (31.3%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (16 CVEs).
16 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-4235HIGH A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed t | Apr 17, 2024 | 8.1 | 26 | NO | NO |
CVE-2023-4232HIGH A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed th | Apr 17, 2024 | 8.1 | 26 | NO | NO |
CVE-2023-2794HIGH A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the | Apr 10, 2024 | 8.1 | 25 | NO | NO |
CVE-2023-4234HIGH A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed th | Apr 17, 2024 | 8.1 | 24 | NO | NO |
CVE-2024-7547HIGH oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of o | Aug 6, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-7546HIGH oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFo | Aug 6, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-7545HIGH oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFo | Aug 6, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-7544HIGH oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFo | Aug 6, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-7543HIGH oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFo | Aug 6, 2024 | 7.8 | 23 | NO | NO |
CVE-2024-7539HIGH oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An atta | Aug 6, 2024 | 7.8 | 23 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (16 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (16 CVEs).
Media Mentions
Signals from CVEs in this product scope (16 CVEs).
Top CNAs Publishing CVEs For Ofono
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 2.3 | 5 | 7.8 | 0.3% | 0 | 0 |
| 1.34 | 6 | 5.2 | 0.3% | 0 | 0 |