deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2024-30986
Published: 2024-04-17
Description: Cross Site Scripting vulnerability in /edit-services-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and via "price" and "sname" parameter.
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40shanunirwan/cve-2024-30986-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3fb702d9d510; https://medium.com/%40shanunirwan/cve-2024-30986-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3fb702d9d510
CVE: CVE-2024-30987
Published: 2024-04-17
Description: Cross Site Scripting vulnerability in /bwdates-reports-ds.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the fromdate and todate parameters.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40shanunirwan/cve-2024-30987-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-b6a7a177d254; https://medium.com/%40shanunirwan/cve-2024-30987-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-b6a7a177d254
CVE: CVE-2024-30988
Published: 2024-04-17
Description: Cross Site Scripting vulnerability in /search-invoices.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code and obtain sensitive information via the Search bar.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40shanunirwan/cve-2024-30988-cross-site-scripting-vulnerability-in-client-management-system-using-php-mysql-1-1-e7a677936c23; https://medium.com/%40shanunirwan/cve-2024-30988-cross-site-scripting-vulnerability-in-client-management-system-using-php-mysql-1-1-e7a677936c23
CVE: CVE-2024-32161
Published: 2024-04-17
Description: jizhiCMS 2.5 suffers from a File upload vulnerability.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-434
References: http://jizhicms.com; https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/jizhicms%20v_2.5.md; http://jizhicms.com
CVE: CVE-2024-3914
Published: 2024-04-17
Description: Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Score: 6.5 (MEDIUM)
CWE: CWE-416, CWE-416
References: https://chromereleases.googleblog.com/2024/04/stable-channel-update-for-desktop_16.html; https://issues.chromium.org/issues/330759272; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWIVXXSVO5VB3NAZVFJ7CWVBN6W2735T/
CVE: CVE-2024-29950
Published: 2024-04-17
Description: The class FileTransfer implemented in Brocade SANnav before v2.3.1, v2.3.0a, uses the ssh-rsa signature scheme, which has a SHA-1 hash.
The vulnerability could allow a remote, unauthenticated attacker to perform a man-in-the-middle attack.

CVSS Score: 7.5 (HIGH)
CWE: CWE-326, CWE-326
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/23236; https://support.broadcom.com/external/content/SecurityAdvisories/0/23236
CVE: CVE-2024-30950
Published: 2024-04-17
Description: A stored cross-site scripting (XSS) vulnerability in FUDforum v3.1.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SQL statements field under /adm/admsql.php.
CVSS Score: 3.5 (LOW)
CWE: CWE-79
References: https://github.com/CrownZTX/vulnerabilities/blob/main/fudforum/stored_xss_in_admsql.md; https://github.com/CrownZTX/vulnerabilities/blob/main/fudforum/stored_xss_in_admsql.md
CVE: CVE-2024-30953
Published: 2024-04-17
Description: A stored cross-site scripting (XSS) vulnerability in Htmly v2.9.5 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Link Name parameter of Menu Editor module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/CrownZTX/vulnerabilities/blob/main/htmly/stored_xss_in_Menueditor.md; https://github.com/CrownZTX/vulnerabilities/blob/main/htmly/stored_xss_in_Menueditor.md
CVE: CVE-2024-30989
Published: 2024-04-17
Description: Cross Site Scripting vulnerability in /edit-client-details.php of phpgurukul Client Management System using PHP & MySQL 1.1 allows attackers to execute arbitrary code via the "cname", "comname", "state" and "city" parameter.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://medium.com/%40shanunirwan/cve-2024-30989-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3cfa1c54e4a6; https://medium.com/%40shanunirwan/cve-2024-30989-multiple-stored-cross-site-scripting-vulnerabilities-in-client-management-system-3cfa1c54e4a6
CVE: CVE-2024-30990
Published: 2024-04-17
Description: SQL Injection vulnerability in the "Invoices" page in phpgurukul Client Management System using PHP & MySQL 1.1 allows attacker to execute arbitrary SQL commands via "searchdata" parameter.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-89
References: https://medium.com/%40shanunirwan/cve-2024-30990-sql-injection-vulnerability-in-invoices-page-of-client-management-system-using-php-58baa94a1761; https://medium.com/%40shanunirwan/cve-2024-30990-sql-injection-vulnerability-in-invoices-page-of-client-management-system-using-php-58baa94a1761
CVE: CVE-2024-31031
Published: 2024-04-17
Description: An issue in `coap_pdu.c` in libcoap 4.3.4 allows attackers to cause undefined behavior via a sequence of messages leading to unsigned integer overflow.
CVSS Score: 7.5 (HIGH)
CWE: CWE-190
References: https://github.com/obgm/libcoap/issues/1351; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LPENEJBV3KSASIYKNZAKXDAH7Q66KPYG/; https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TUL7QDYFGEIJVO2ZSG4O5HEAWR6PFC52/
CVE: CVE-2024-31040
Published: 2024-04-17
Description: Buffer Overflow vulnerability in the get_var_integer function in mqtt_parser.c in NanoMQ 0.21.7 allows remote attackers to cause a denial of service via a series of specially crafted hexstreams.
CVSS Score: 2.7 (LOW)
CWE: CWE-120
References: https://github.com/nanomq/nanomq/issues/1720; https://github.com/nanomq/nanomq/issues/1720
CVE: CVE-2024-31041
Published: 2024-04-17
Description: Null Pointer Dereference vulnerability in topic_filtern function in mqtt_parser.c in NanoMQ 0.21.7 allows attackers to cause a denial of service.
CVSS Score: 7.5 (HIGH)
CWE: CWE-476
References: https://github.com/nanomq/nanomq/issues/1723; https://github.com/nanomq/nanomq/issues/1723
CVE: CVE-2024-31580
Published: 2024-04-17
Description: PyTorch before v2.2.0 was discovered to contain a heap buffer overflow vulnerability in the component /runtime/vararg_functions.cpp. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 4.0 (MEDIUM)
CWE: CWE-122
References: https://gist.github.com/[PII_REDACTED]/038c78f2f007345e6f497698ace2aa3d; https://github.com/pytorch/pytorch/commit/b5c3a17c2c207ebefcb85043f0cf94be9b2fef81; https://gist.github.com/[PII_REDACTED]/038c78f2f007345e6f497698ace2aa3d
CVE: CVE-2024-31581
Published: 2024-04-17
Description: FFmpeg version n6.1 was discovered to contain an improper validation of array index vulnerability in libavcodec/cbs_h266_syntax_template.c. This vulnerability allows attackers to cause undefined behavior within the application.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-129
References: https://gist.github.com/[PII_REDACTED]/a7e9273e[PII_REDACTED]784035333cdd8; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavcodec/cbs_h266_syntax_template.c#L2048; https://github.com/ffmpeg/ffmpeg/commit/ce0c178a408d43e71085c28a47d50dc939b60196
CVE: CVE-2024-31582
Published: 2024-04-17
Description: FFmpeg version n6.1 was discovered to contain a heap buffer overflow vulnerability in the draw_block_rectangle function of libavfilter/vf_codecview.c. This vulnerability allows attackers to cause undefined behavior or a Denial of Service (DoS) via crafted input.
CVSS Score: 7.8 (HIGH)
CWE: CWE-122
References: https://gist.github.com/[PII_REDACTED]/b47d5efe3bc420fb91dbb77c73c0fff3; https://github.com/FFmpeg/FFmpeg/blob/n6.1.1/libavfilter/vf_codecview.c#L220; https://github.com/ffmpeg/ffmpeg/commit/99debe5f823f45a482e1dc08de35879aa9c74bd2
CVE: CVE-2024-31583
Published: 2024-04-17
Description: Pytorch before version v2.2.0 was discovered to contain a use-after-free vulnerability in torch/csrc/jit/mobile/interpreter.cpp.
CVSS Score: 7.8 (HIGH)
CWE: CWE-416
References: https://gist.github.com/[PII_REDACTED]/43e19a41f2b36503a4a228c32cdbc176; https://github.com/pytorch/pytorch/blob/v2.1.2/torch/csrc/jit/mobile/interpreter.cpp#L132; https://github.com/pytorch/pytorch/commit/9c7071b0e324f9fb68ab881283d6b8d388a4bcd2
CVE: CVE-2024-31585
Published: 2024-04-17
Description: FFmpeg version n5.1 to n6.1 was discovered to contain an Off-by-one Error vulnerability in libavfilter/avf_showspectrum.c. This vulnerability allows attackers to cause a Denial of Service (DoS) via a crafted input.
CVSS Score: 5.3 (MEDIUM)
CWE: CWE-193
References: https://gist.github.com/[PII_REDACTED]/dc2c64ffe0c3934a6176bcd2c5cf5656; https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/aec67d3d7d2895bfea61aa1358d9d8e956f8615c..ab0fdaedd1e7224f7e84ea22fcbfaa4ca75a6c06:/libavfilter/avf_showspectrum.c; https://git.ffmpeg.org/gitweb/ffmpeg.git/blobdiff/bf2d7b20ea1c7d15dcbaedd479f40295e5c83430..3061bf668feffc7c1f0b244205167b3b86da8015:/libavfilter/avf_showspectrum.c
CVE: CVE-2024-32162
Published: 2024-04-17
Description: CMSeasy 7.7.7.9 is vulnerable to Arbitrary file deletion.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-791
References: http://cmseasy.com; https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/CMSeasy_7.7.7_file_deletion.md; http://cmseasy.com
CVE: CVE-2024-32163
Published: 2024-04-17
Description: CMSeasy 7.7.7.9 is vulnerable to code execution.
CVSS Score: 6.4 (MEDIUM)
CWE: CWE-22
References: https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/CMSeasy_7.7.7.9_code_execution.md; https://www.cmseasy.cn/; https://github.com/XiLitter/CMS_vulnerability-discovery/blob/main/CMSeasy_7.7.7.9_code_execution.md
CVE: CVE-2024-3323
Published: 2024-04-17
Description: Cross Site Scripting in 

UI Request/Response Validation

 in TIBCO JasperReports Server 8.0.4 and 8.2.0 allows allows for the injection of malicious executable scripts into the code of a trusted application that may lead to stealing the user's active session cookie via sending malicious link, enticing the user to interact.
CVSS Score: 8.3 (HIGH)
CWE: CWE-79
References: https://community.tibco.com/advisories/tibco-security-advisory-april-9-2024-tibco-jasperreports-server-cve-2024-3323-r209/; https://community.tibco.com/advisories/tibco-security-advisory-april-9-2024-tibco-jasperreports-server-cve-2024-3323-r209/
CVE: CVE-2024-3900
Published: 2024-04-17
Description: Out-of-bounds array write in Xpdf 4.05 and earlier, triggered by long Unicode sequence in ActualText.

CVSS Score: 2.9 (LOW)
CWE: CWE-787, CWE-787
References: https://www.xpdfreader.com/security-bug/CVE-2024-3900.html; https://www.xpdfreader.com/security-bug/CVE-2024-3900.html
CVE: CVE-2024-0257
Published: 2024-04-17
Description: 
RoboDK v5.5.4

 is vulnerable to heap-based buffer overflow while processing a specific project file. The resulting memory corruption may crash the application.


CVSS Score: 3.3 (LOW)
CWE: CWE-122
References: https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-04; https://www.cisa.gov/news-events/ics-advisories/icsa-24-107-04
CVE: CVE-2024-21989
Published: 2024-04-17
Description: ONTAP Select Deploy administration utility versions 9.12.1.x, 
9.13.1.x and 9.14.1.x are susceptible to a vulnerability which when 
successfully exploited could allow a read-only user to escalate their 
privileges.


CVSS Score: 8.1 (HIGH)
CWE: CWE-269
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-21990
Published: 2024-04-17
Description: ONTAP Select Deploy administration utility versions 9.12.1.x, 
9.13.1.x and 9.14.1.x contain hard-coded credentials that could allow an
 attacker to view Deploy configuration information and modify the 
account credentials.





CVSS Score: 5.4 (MEDIUM)
CWE: CWE-259, CWE-798
References: https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/; https://security.netapp.com/advisory/ntap-20[PII_REDACTED]/
CVE: CVE-2024-29951
Published: 2024-04-17
Description: Brocade SANnav before v2.3.1 and v2.3.0a uses the SHA-1 hash in internal SSH ports that are not open to remote connection.


CVSS Score: 5.7 (MEDIUM)
CWE: CWE-326, CWE-326
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/23237; https://support.broadcom.com/external/content/SecurityAdvisories/0/23237
CVE: CVE-2024-3817
Published: 2024-04-17
Description: HashiCorp’s go-getter library is vulnerable to argument injection when executing Git to discover remote branches. 

This vulnerability does not affect the go-getter/v2 branch and package.
CVSS Score: 9.8 (CRITICAL)
CWE: CWE-88
References: https://discuss.hashicorp.com/t/hcsec-2024-09-hashicorp-go-getter-vulnerable-to-argument-injection-when-fetching-remote-default-git-branches/66040; https://discuss.hashicorp.com/t/hcsec-2024-09-hashicorp-go-getter-vulnerable-to-argument-injection-when-fetching-remote-default-git-branches/66040
CVE: CVE-2024-32337
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_security_wondercms_3.4.3; https://github.com/adiapera/xss_security_wondercms_3.4.3
CVE: CVE-2024-32338
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_current_page_wondercms_3.4.3; https://github.com/adiapera/xss_current_page_wondercms_3.4.3
CVE: CVE-2024-32339
Published: 2024-04-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_how_to_page_wondercms_3.4.3; https://github.com/adiapera/xss_how_to_page_wondercms_3.4.3
CVE: CVE-2024-32340
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module.
CVSS Score: 9.6 (CRITICAL)
CWE: CWE-79
References: https://github.com/adiapera/xss_menu_page_wondercms_3.4.3; https://github.com/adiapera/xss_menu_page_wondercms_3.4.3
CVE: CVE-2024-32341
Published: 2024-04-17
Description: Multiple cross-site scripting (XSS) vulnerabilities in the Home page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters.
CVSS Score: 5.4 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_home_page_wondercms_3.4.3; https://github.com/adiapera/xss_home_page_wondercms_3.4.3
CVE: CVE-2024-32342
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Permalink parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_create_boidcms_2.1.0; https://github.com/adiapera/xss_create_boidcms_2.1.0
CVE: CVE-2024-32343
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_create2_boidcms_2.1.0; https://github.com/adiapera/xss_create2_boidcms_2.1.0
CVE: CVE-2024-32344
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Edit parameter under the Language section.
CVSS Score: 6.8 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_language_cmsimple_5.15/blob/main/README.md; https://github.com/adiapera/xss_language_cmsimple_5.15/blob/main/README.md
CVE: CVE-2024-32345
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings menu of CMSimple v5.15 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Configuration parameter under the Language section.
CVSS Score: 7.2 (HIGH)
CWE: CWE-79
References: https://github.com/adiapera/xss_language_cmsimple_5.15; https://github.com/adiapera/xss_language_cmsimple_5.15
CVE: CVE-2024-32743
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the SITE LANGUAGE CONFIG parameter under the Security module.
CVSS Score: 5.5 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_security_wondercms_3.4.3; https://github.com/adiapera/xss_security_wondercms_3.4.3
CVE: CVE-2024-32744
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE KEYWORDS parameter under the CURRENT PAGE module.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_current_page_wondercms_3.4.3; https://github.com/adiapera/xss_current_page_wondercms_3.4.3
CVE: CVE-2024-32745
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE DESCRIPTION parameter under the CURRENT PAGE module.
CVSS Score: 5.9 (MEDIUM)
CWE: CWE-79
References: https://github.com/adiapera/xss_current_page_wondercms_3.4.3; https://github.com/adiapera/xss_current_page_wondercms_3.4.3
CVE: CVE-2024-32746
Published: 2024-04-17
Description: A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the MENU parameter under the Menu module.
CVSS Score: 4.6 (MEDIUM)
CWE: CWE-80
References: https://github.com/adiapera/xss_menu_page_wondercms_3.4.3; https://github.com/adiapera/xss_menu_page_wondercms_3.4.3
CVE: CVE-2024-29952
Published: 2024-04-17
Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow an authenticated user to print the Auth, Priv, and SSL key store passwords in unencrypted logs by manipulating command variables.


CVSS Score: 5.5 (MEDIUM)
CWE: CWE-312, CWE-312
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/23238; https://support.broadcom.com/external/content/SecurityAdvisories/0/23238
CVE: CVE-2024-29955
Published: 2024-04-17
Description: A vulnerability in Brocade SANnav before v2.3.1 and v2.3.0a could allow a privileged user to print the SANnav encrypted key in PostgreSQL startup logs. 
This could provide attackers with an additional, less-protected path to acquiring the encryption key. 


CVSS Score: 5.0 (MEDIUM)
CWE: CWE-532, CWE-532
References: https://support.broadcom.com/external/content/SecurityAdvisories/0/23239; https://support.broadcom.com/external/content/SecurityAdvisories/0/23239
CVE: CVE-2024-32472
Published: 2024-04-17
Description: excalidraw is an open source virtual hand-drawn style whiteboard. A stored XSS vulnerability in Excalidraw's web embeddable component. This allows arbitrary JavaScript to be run in the context of the domain where the editor is hosted. There were two vectors. One rendering untrusted string as iframe's `srcdoc` without properly sanitizing against HTML injection. Second by improperly sanitizing against attribute HTML injection. This in conjunction with allowing `allow-same-origin` sandbox flag (necessary for several embeds) resulted in the XSS. This vulnerability is fixed in 0.17.6 and 0.16.4.
CVSS Score: 6.1 (MEDIUM)
CWE: CWE-79, CWE-80
References: https://github.com/excalidraw/excalidraw/commit/6be752e1b6d776ccfbd3bb9eea17463cb264121d; https://github.com/excalidraw/excalidraw/commit/988f81911ca58e3ca2583e0dd44a954dd00e09d0; https://github.com/excalidraw/excalidraw/security/advisories/GHSA-m64q-4jqh-f72f
CVE: CVE-2023-4232
Published: 2024-04-17
Description: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_status_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_status_report().
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=2255394; https://bugzilla.redhat.com/show_bug.cgi?id=2255394; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLAWJAAS3HDI2KMCZXF4DMR3Y4BQNMKO/
CVE: CVE-2023-4233
Published: 2024-04-17
Description: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the sms_decode_address_field() function during the SMS PDU decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS.
CVSS Score: 8.1 (HIGH)
CWE: CWE-119, CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=2255396; https://bugzilla.redhat.com/show_bug.cgi?id=2255396; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T/
CVE: CVE-2023-4234
Published: 2024-04-17
Description: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_submit_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_submit_report().
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=2255399; https://bugzilla.redhat.com/show_bug.cgi?id=2255399; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NBTPKR3LYTTLROPXF77FL4SPLXVHNC4T/
CVE: CVE-2023-4235
Published: 2024-04-17
Description: A flaw was found in ofono, an Open Source Telephony on Linux. A stack overflow bug is triggered within the decode_deliver_report() function during the SMS decoding. It is assumed that the attack scenario is accessible from a compromised modem, a malicious base station, or just SMS. There is a bound check for this memcpy length in decode_submit(), but it was forgotten in decode_deliver_report().
CVSS Score: 8.1 (HIGH)
CWE: CWE-119
References: https://bugzilla.redhat.com/show_bug.cgi?id=2255402; https://bugzilla.redhat.com/show_bug.cgi?id=2255402; https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/RLAWJAAS3HDI2KMCZXF4DMR3Y4BQNMKO/