[0/2] CVE-2023-4233 and CVE-2023-4234

Message ID	20231221141638.19774-1-d.grigorev@omp.ru (mailing list archive)
Headers	show Received: from mx01.omp.ru (mx01.omp.ru [90.154.21.10]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by smtp.subspace.kernel.org (Postfix) with ESMTPS id 41AC2A55 for <ofono@lists.linux.dev>; Thu, 21 Dec 2023 14:38:55 +0000 (UTC) From: Denis Grigorev <d.grigorev@omp.ru> To: <ofono@lists.linux.dev> CC: <denkenz@gmail.com>, <d.grigorev@omp.ru> Subject: [PATCH 0/2] CVE-2023-4233 and CVE-2023-4234 Date: Thu, 21 Dec 2023 17:16:36 +0300 Message-ID: <20231221141638.19774-1-d.grigorev@omp.ru> Precedence: bulk MIME-Version: 1.0 Content-Type: text/plain on: 12/21/2023 14:23:47 from: d.grigorev@omp.ru DNSBL: 109.73.39.18 in (user) dbl.spamhaus.org} bases: 12/21/2023 10:52:00 AM X-KSE-Attachment-Filter-Triggered-Rules: Clean X-KSE-Attachment-Filter-Triggered-Filters: Clean X-KSE-BulkMessagesFiltering-Scan-Result: InTheLimit
Series	CVE-2023-4233 and CVE-2023-4234 \| expand [0/2] CVE-2023-4233 and CVE-2023-4234 [1/2] smsutil: Check that address fits in memory [2/2] smsutil: Check that submit report fits in memory

Message ID

20231221141638.19774-1-d.grigorev@omp.ru (mailing list archive)

Headers

From: Denis Grigorev <d.grigorev@omp.ru>
To: <ofono@lists.linux.dev>
CC: <denkenz@gmail.com>, <d.grigorev@omp.ru>
Subject: [PATCH 0/2] CVE-2023-4233 and CVE-2023-4234
Date: Thu, 21 Dec 2023 17:16:36 +0300
Message-ID: <20231221141638.19774-1-d.grigorev@omp.ru>
Precedence: bulk
MIME-Version: 1.0
Content-Type: text/plain
X-KSE-Attachment-Filter-Triggered-Filters: Clean
X-KSE-BulkMessagesFiltering-Scan-Result: InTheLimit

Series

CVE-2023-4233 and CVE-2023-4234 | expand

Message

Denis Grigorev Dec. 21, 2023, 2:16 p.m. UTC

Hello,

The following patches prevent possible buffer overflow during SMS
decoding. 

There are corresponding bug reports on Red Hat Bugzilla:

 * https://bugzilla.redhat.com/show_bug.cgi?id=2255396
 * https://bugzilla.redhat.com/show_bug.cgi?id=2255399

Denis Grigorev (2):
  smsutil: Check that address fits in memory
  smsutil: Check that submit report fits in memory

 src/smsutil.c | 10 ++++++++++
 1 file changed, 10 insertions(+)