OPENSUSE-SU-2026:21154-1
Vulnerability from csaf_opensuse - Published: 2026-06-23 13:07 - Updated: 2026-09-16 21:42Summary
Security update for ofono
Severity
Important
Notes
Title of the patch: Security update for ofono
Description of the patch: This update for ofono fixes the following issues:
Changes in ofono:
- Reference the tracking bugs for the SMS/STK/USSD decoder security
fixes applied upstream across the 2.14-2.17 updates:
* SMS decoder stack buffer overflows: CVE-2023-2794 (boo#1218292),
CVE-2023-4232 (boo#1218293), CVE-2023-4233 (boo#1218294),
CVE-2023-4234 (boo#1218295), CVE-2023-4235 (boo#1218296)
* SMS PDU / message-list parsing overflows and OOB read:
CVE-2024-7537 (boo#1228903), CVE-2024-7547 (boo#1228917)
* AT-command / USSD response parsing overflows: CVE-2024-7538
(boo#1228904), CVE-2024-7539 (boo#1228905)
* Uninitialized-memory information disclosure: CVE-2024-7540
(boo#1228906), CVE-2024-7541 (boo#1228907), CVE-2024-7542
(boo#1228908)
* STK command PDU heap overflows: CVE-2024-7543 (boo#1228910),
CVE-2024-7544 (boo#1228913), CVE-2024-7545 (boo#1228914),
CVE-2024-7546 (boo#1228916)
- Update to version 2.19
* Add support for PPP reset workaround for SIM7100 modem.
* Add support for Qualcomm RAW-IP only devices.
- Update to version 2.18
* Fix issue with QMI and handling SMS message acknowledgement.
* Fix issue with handling SIM7100 modem ready detection.
* Add support for forbidden operator list.
- Update to version 2.17
* Fix issue with SMS and possible buffer overflow.
- Update to version 2.16
* Add support for QMI service request rate limiting.
- Update to version 2.15
* Fix issue with SMS and uninitialized buffers.
* Fix issue with USSD and uninitialized buffers.
* Add support for the Test Anything Protocol.
- Update to version 2.14
* Fix issue with STK and buffer length checks.
* Fix issue with SMS and buffer length checks.
* Fix issue with QMI and handling RAT detection.
* Fix issue with QMI and handling call forwarding.
* Add support for handling MHI network interfaces.
- Update to version 2.13
* Add support for handling QMI PIN and Lock methods.
* Add support for handling QMI WWAN interfaces.
* Add support for handling RMNet interfaces.
- Update to version 2.12
* Fix issue with access technology reporting.
* Fix issue with detecting Phonet devices.
- Update to version 2.11
* Add support for SIMCom A7672E-FASE modem.
* Add support for Quectel EG916Q-GL modem.
Patchnames: openSUSE-Leap-16.0-packagehub-349
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
5.5 (Medium)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
moderate
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
moderate
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
7.8 (High)
Affected products
Recommended
12 products, the same list as for
CVE-2023-2794
Threats
Impact
important
References
66 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for ofono",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for ofono fixes the following issues:\n\nChanges in ofono:\n\n- Reference the tracking bugs for the SMS/STK/USSD decoder security\n fixes applied upstream across the 2.14-2.17 updates:\n * SMS decoder stack buffer overflows: CVE-2023-2794 (boo#1218292),\n CVE-2023-4232 (boo#1218293), CVE-2023-4233 (boo#1218294),\n CVE-2023-4234 (boo#1218295), CVE-2023-4235 (boo#1218296)\n * SMS PDU / message-list parsing overflows and OOB read:\n CVE-2024-7537 (boo#1228903), CVE-2024-7547 (boo#1228917)\n * AT-command / USSD response parsing overflows: CVE-2024-7538\n (boo#1228904), CVE-2024-7539 (boo#1228905)\n * Uninitialized-memory information disclosure: CVE-2024-7540\n (boo#1228906), CVE-2024-7541 (boo#1228907), CVE-2024-7542\n (boo#1228908)\n * STK command PDU heap overflows: CVE-2024-7543 (boo#1228910),\n CVE-2024-7544 (boo#1228913), CVE-2024-7545 (boo#1228914),\n CVE-2024-7546 (boo#1228916)\n\n- Update to version 2.19\n * Add support for PPP reset workaround for SIM7100 modem.\n * Add support for Qualcomm RAW-IP only devices.\n\n- Update to version 2.18\n * Fix issue with QMI and handling SMS message acknowledgement.\n * Fix issue with handling SIM7100 modem ready detection.\n * Add support for forbidden operator list.\n\n- Update to version 2.17\n * Fix issue with SMS and possible buffer overflow.\n\n- Update to version 2.16\n * Add support for QMI service request rate limiting.\n\n- Update to version 2.15\n * Fix issue with SMS and uninitialized buffers.\n * Fix issue with USSD and uninitialized buffers.\n * Add support for the Test Anything Protocol.\n\n- Update to version 2.14\n * Fix issue with STK and buffer length checks.\n * Fix issue with SMS and buffer length checks.\n * Fix issue with QMI and handling RAT detection.\n * Fix issue with QMI and handling call forwarding.\n * Add support for handling MHI network interfaces.\n\n- Update to version 2.13\n * Add support for handling QMI PIN and Lock methods.\n * Add support for handling QMI WWAN interfaces.\n * Add support for handling RMNet interfaces.\n\n- Update to version 2.12\n * Fix issue with access technology reporting.\n * Fix issue with detecting Phonet devices.\n\n- Update to version 2.11\n * Add support for SIMCom A7672E-FASE modem.\n * Add support for Quectel EG916Q-GL modem.\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "openSUSE-Leap-16.0-packagehub-349",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_21154-1.json"
},
{
"category": "self",
"summary": "SUSE Bug 1218292",
"url": "https://bugzilla.suse.com/1218292"
},
{
"category": "self",
"summary": "SUSE Bug 1218293",
"url": "https://bugzilla.suse.com/1218293"
},
{
"category": "self",
"summary": "SUSE Bug 1218294",
"url": "https://bugzilla.suse.com/1218294"
},
{
"category": "self",
"summary": "SUSE Bug 1218295",
"url": "https://bugzilla.suse.com/1218295"
},
{
"category": "self",
"summary": "SUSE Bug 1218296",
"url": "https://bugzilla.suse.com/1218296"
},
{
"category": "self",
"summary": "SUSE Bug 1228903",
"url": "https://bugzilla.suse.com/1228903"
},
{
"category": "self",
"summary": "SUSE Bug 1228904",
"url": "https://bugzilla.suse.com/1228904"
},
{
"category": "self",
"summary": "SUSE Bug 1228905",
"url": "https://bugzilla.suse.com/1228905"
},
{
"category": "self",
"summary": "SUSE Bug 1228906",
"url": "https://bugzilla.suse.com/1228906"
},
{
"category": "self",
"summary": "SUSE Bug 1228907",
"url": "https://bugzilla.suse.com/1228907"
},
{
"category": "self",
"summary": "SUSE Bug 1228908",
"url": "https://bugzilla.suse.com/1228908"
},
{
"category": "self",
"summary": "SUSE Bug 1228910",
"url": "https://bugzilla.suse.com/1228910"
},
{
"category": "self",
"summary": "SUSE Bug 1228913",
"url": "https://bugzilla.suse.com/1228913"
},
{
"category": "self",
"summary": "SUSE Bug 1228914",
"url": "https://bugzilla.suse.com/1228914"
},
{
"category": "self",
"summary": "SUSE Bug 1228916",
"url": "https://bugzilla.suse.com/1228916"
},
{
"category": "self",
"summary": "SUSE Bug 1228917",
"url": "https://bugzilla.suse.com/1228917"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-2794 page",
"url": "https://www.suse.com/security/cve/CVE-2023-2794/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4232 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4232/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4233 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4233/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4234 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4234/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2023-4235 page",
"url": "https://www.suse.com/security/cve/CVE-2023-4235/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7537 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7537/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7538 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7538/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7539 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7539/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7540 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7540/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7541 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7541/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7542 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7542/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7543 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7543/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7544 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7544/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7545 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7545/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7546 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7546/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2024-7547 page",
"url": "https://www.suse.com/security/cve/CVE-2024-7547/"
}
],
"title": "Security update for ofono",
"tracking": {
"current_release_date": "2026-09-16T21:42:08Z",
"generator": {
"date": "2026-06-23T13:07:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "openSUSE-SU-2026:21154-1",
"initial_release_date": "2026-06-23T13:07:52Z",
"revision_history": [
{
"date": "2026-06-23T13:07:52Z",
"number": "1",
"summary": "Current version"
},
{
"date": "2026-09-16T20:40:04Z",
"number": "2",
"summary": "unknown changes"
},
{
"date": "2026-09-16T21:42:08Z",
"number": "3",
"summary": "unknown changes"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "ofono-2.19-bp160.1.1.aarch64",
"product": {
"name": "ofono-2.19-bp160.1.1.aarch64",
"product_id": "ofono-2.19-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono@2.19-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ofono-devel-2.19-bp160.1.1.aarch64",
"product": {
"name": "ofono-devel-2.19-bp160.1.1.aarch64",
"product_id": "ofono-devel-2.19-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-devel@2.19-bp160.1.1?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "ofono-tests-2.19-bp160.1.1.aarch64",
"product": {
"name": "ofono-tests-2.19-bp160.1.1.aarch64",
"product_id": "ofono-tests-2.19-bp160.1.1.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-tests@2.19-bp160.1.1?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "ofono-2.19-bp160.1.1.ppc64le",
"product": {
"name": "ofono-2.19-bp160.1.1.ppc64le",
"product_id": "ofono-2.19-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono@2.19-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ofono-devel-2.19-bp160.1.1.ppc64le",
"product": {
"name": "ofono-devel-2.19-bp160.1.1.ppc64le",
"product_id": "ofono-devel-2.19-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-devel@2.19-bp160.1.1?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "ofono-tests-2.19-bp160.1.1.ppc64le",
"product": {
"name": "ofono-tests-2.19-bp160.1.1.ppc64le",
"product_id": "ofono-tests-2.19-bp160.1.1.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-tests@2.19-bp160.1.1?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "ofono-2.19-bp160.1.1.s390x",
"product": {
"name": "ofono-2.19-bp160.1.1.s390x",
"product_id": "ofono-2.19-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono@2.19-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ofono-devel-2.19-bp160.1.1.s390x",
"product": {
"name": "ofono-devel-2.19-bp160.1.1.s390x",
"product_id": "ofono-devel-2.19-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-devel@2.19-bp160.1.1?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "ofono-tests-2.19-bp160.1.1.s390x",
"product": {
"name": "ofono-tests-2.19-bp160.1.1.s390x",
"product_id": "ofono-tests-2.19-bp160.1.1.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-tests@2.19-bp160.1.1?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "ofono-2.19-bp160.1.1.x86_64",
"product": {
"name": "ofono-2.19-bp160.1.1.x86_64",
"product_id": "ofono-2.19-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono@2.19-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ofono-devel-2.19-bp160.1.1.x86_64",
"product": {
"name": "ofono-devel-2.19-bp160.1.1.x86_64",
"product_id": "ofono-devel-2.19-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-devel@2.19-bp160.1.1?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "ofono-tests-2.19-bp160.1.1.x86_64",
"product": {
"name": "ofono-tests-2.19-bp160.1.1.x86_64",
"product_id": "ofono-tests-2.19-bp160.1.1.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/suse/ofono-tests@2.19-bp160.1.1?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "openSUSE Leap 16.0",
"product": {
"name": "openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0"
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-2.19-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64"
},
"product_reference": "ofono-2.19-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-2.19-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le"
},
"product_reference": "ofono-2.19-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-2.19-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x"
},
"product_reference": "ofono-2.19-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-2.19-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64"
},
"product_reference": "ofono-2.19-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-devel-2.19-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64"
},
"product_reference": "ofono-devel-2.19-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-devel-2.19-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le"
},
"product_reference": "ofono-devel-2.19-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-devel-2.19-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x"
},
"product_reference": "ofono-devel-2.19-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-devel-2.19-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64"
},
"product_reference": "ofono-devel-2.19-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-tests-2.19-bp160.1.1.aarch64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64"
},
"product_reference": "ofono-tests-2.19-bp160.1.1.aarch64",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-tests-2.19-bp160.1.1.ppc64le as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le"
},
"product_reference": "ofono-tests-2.19-bp160.1.1.ppc64le",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-tests-2.19-bp160.1.1.s390x as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x"
},
"product_reference": "ofono-tests-2.19-bp160.1.1.s390x",
"relates_to_product_reference": "openSUSE Leap 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "ofono-tests-2.19-bp160.1.1.x86_64 as component of openSUSE Leap 16.0",
"product_id": "openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
},
"product_reference": "ofono-tests-2.19-bp160.1.1.x86_64",
"relates_to_product_reference": "openSUSE Leap 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2023-2794",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-2794"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-2794",
"url": "https://www.suse.com/security/cve/CVE-2023-2794"
},
{
"category": "external",
"summary": "SUSE Bug 1218292 for CVE-2023-2794",
"url": "https://bugzilla.suse.com/1218292"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2023-2794"
},
{
"cve": "CVE-2023-4232",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4232"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4232",
"url": "https://www.suse.com/security/cve/CVE-2023-4232"
},
{
"category": "external",
"summary": "SUSE Bug 1218293 for CVE-2023-4232",
"url": "https://bugzilla.suse.com/1218293"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2023-4232"
},
{
"cve": "CVE-2023-4233",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4233"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4233",
"url": "https://www.suse.com/security/cve/CVE-2023-4233"
},
{
"category": "external",
"summary": "SUSE Bug 1218294 for CVE-2023-4233",
"url": "https://bugzilla.suse.com/1218294"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2023-4233"
},
{
"cve": "CVE-2023-4234",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4234"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4234",
"url": "https://www.suse.com/security/cve/CVE-2023-4234"
},
{
"category": "external",
"summary": "SUSE Bug 1218295 for CVE-2023-4234",
"url": "https://bugzilla.suse.com/1218295"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2023-4234"
},
{
"cve": "CVE-2023-4235",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2023-4235"
}
],
"notes": [
{
"category": "general",
"text": "A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2023-4235",
"url": "https://www.suse.com/security/cve/CVE-2023-4235"
},
{
"category": "external",
"summary": "SUSE Bug 1218296 for CVE-2023-4235",
"url": "https://bugzilla.suse.com/1218296"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2023-4235"
},
{
"cve": "CVE-2024-7537",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7537"
}
],
"notes": [
{
"category": "general",
"text": "oFono QMI SMS Handling Out-Of-Bounds Read Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. Authentication is not required to exploit this vulnerability.\n\nThe specific flaw exists within the processing of SMS message lists. The issue results from the lack of proper validation of user-supplied data, which can result in a read past the end of an allocated buffer. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23157.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7537",
"url": "https://www.suse.com/security/cve/CVE-2024-7537"
},
{
"category": "external",
"summary": "SUSE Bug 1228903 for CVE-2024-7537",
"url": "https://bugzilla.suse.com/1228903"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "moderate"
}
],
"title": "CVE-2024-7537"
},
{
"cve": "CVE-2024-7538",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7538"
}
],
"notes": [
{
"category": "general",
"text": "oFono CUSD AT Command Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of responses from AT Commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23190.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7538",
"url": "https://www.suse.com/security/cve/CVE-2024-7538"
},
{
"category": "external",
"summary": "SUSE Bug 1228904 for CVE-2024-7538",
"url": "https://bugzilla.suse.com/1228904"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7538"
},
{
"cve": "CVE-2024-7539",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7539"
}
],
"notes": [
{
"category": "general",
"text": "oFono CUSD Stack-based Buffer Overflow Code Execution Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of responses from AT+CUSD commands. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of root. Was ZDI-CAN-23195.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7539",
"url": "https://www.suse.com/security/cve/CVE-2024-7539"
},
{
"category": "external",
"summary": "SUSE Bug 1228905 for CVE-2024-7539",
"url": "https://bugzilla.suse.com/1228905"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7539"
},
{
"cve": "CVE-2024-7540",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7540"
}
],
"notes": [
{
"category": "general",
"text": "oFono AT CMGL Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of responses from AT+CMGL commands. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23307.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7540",
"url": "https://www.suse.com/security/cve/CVE-2024-7540"
},
{
"category": "external",
"summary": "SUSE Bug 1228906 for CVE-2024-7540",
"url": "https://bugzilla.suse.com/1228906"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "moderate"
}
],
"title": "CVE-2024-7540"
},
{
"cve": "CVE-2024-7541",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7541"
}
],
"notes": [
{
"category": "general",
"text": "oFono AT CMT Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of responses from AT+CMT commands. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23308.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7541",
"url": "https://www.suse.com/security/cve/CVE-2024-7541"
},
{
"category": "external",
"summary": "SUSE Bug 1228907 for CVE-2024-7541",
"url": "https://bugzilla.suse.com/1228907"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "moderate"
}
],
"title": "CVE-2024-7541"
},
{
"cve": "CVE-2024-7542",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7542"
}
],
"notes": [
{
"category": "general",
"text": "oFono AT CMGR Command Uninitialized Variable Information Disclosure Vulnerability. This vulnerability allows local attackers to disclose sensitive information on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of responses from AT+CMGR commands. The issue results from the lack of proper initialization of memory prior to accessing it. An attacker can leverage this in conjunction with other vulnerabilities to execute arbitrary code in the context of root. Was ZDI-CAN-23309.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7542",
"url": "https://www.suse.com/security/cve/CVE-2024-7542"
},
{
"category": "external",
"summary": "SUSE Bug 1228908 for CVE-2024-7542",
"url": "https://bugzilla.suse.com/1228908"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "moderate"
}
],
"title": "CVE-2024-7542"
},
{
"cve": "CVE-2024-7543",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7543"
}
],
"notes": [
{
"category": "general",
"text": "oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of STK command PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23456.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7543",
"url": "https://www.suse.com/security/cve/CVE-2024-7543"
},
{
"category": "external",
"summary": "SUSE Bug 1228910 for CVE-2024-7543",
"url": "https://bugzilla.suse.com/1228910"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "moderate"
}
],
"title": "CVE-2024-7543"
},
{
"cve": "CVE-2024-7544",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7544"
}
],
"notes": [
{
"category": "general",
"text": "oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of STK command PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23457.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7544",
"url": "https://www.suse.com/security/cve/CVE-2024-7544"
},
{
"category": "external",
"summary": "SUSE Bug 1228913 for CVE-2024-7544",
"url": "https://bugzilla.suse.com/1228913"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7544"
},
{
"cve": "CVE-2024-7545",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7545"
}
],
"notes": [
{
"category": "general",
"text": "oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of STK command PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23458.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7545",
"url": "https://www.suse.com/security/cve/CVE-2024-7545"
},
{
"category": "external",
"summary": "SUSE Bug 1228914 for CVE-2024-7545",
"url": "https://bugzilla.suse.com/1228914"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7545"
},
{
"cve": "CVE-2024-7546",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7546"
}
],
"notes": [
{
"category": "general",
"text": "oFono SimToolKit Heap-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of STK command PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a heap-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23459.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7546",
"url": "https://www.suse.com/security/cve/CVE-2024-7546"
},
{
"category": "external",
"summary": "SUSE Bug 1228916 for CVE-2024-7546",
"url": "https://bugzilla.suse.com/1228916"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7546"
},
{
"cve": "CVE-2024-7547",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2024-7547"
}
],
"notes": [
{
"category": "general",
"text": "oFono SMS Decoder Stack-based Buffer Overflow Privilege Escalation Vulnerability. This vulnerability allows local attackers to execute arbitrary code on affected installations of oFono. An attacker must first obtain the ability to execute code on the target modem in order to exploit this vulnerability.\n\nThe specific flaw exists within the parsing of SMS PDUs. The issue results from the lack of proper validation of the length of user-supplied data prior to copying it to a stack-based buffer. An attacker can leverage this vulnerability to execute code in the context of the service account. Was ZDI-CAN-23460.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2024-7547",
"url": "https://www.suse.com/security/cve/CVE-2024-7547"
},
{
"category": "external",
"summary": "SUSE Bug 1228917 for CVE-2024-7547",
"url": "https://bugzilla.suse.com/1228917"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 7.8,
"baseSeverity": "HIGH",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-devel-2.19-bp160.1.1.x86_64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.aarch64",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.ppc64le",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.s390x",
"openSUSE Leap 16.0:ofono-tests-2.19-bp160.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-23T13:07:52Z",
"details": "important"
}
],
"title": "CVE-2024-7547"
}
]
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.
Loading…
Related by attack behaviour
Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.
Loading…