In resolvcachelookup of res_cache.cpp, there is a possible side channel information disclosure. This could lead to local information disclosure of accessed web resources with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"231042786712311953649277541044069490528",
"276508430866575048770931847330454273285",
"166821393136705444465706299623934956448",
"172511824556381835024513469029742578669",
"145463066376043017303717621580381637866",
"238587867188997282428657149415427053257",
"13318524222623468861351291915420556565",
"174131321719322973171935711709996056696",
"192121196245013030225515138304041579434",
"220691357824932275441490001592600120408"
]
},
"id": "ASB-A-150371903-202da7d3",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/e1ec3b167754930d4d87b48414f9d707554a02f0",
"target": {
"file": "resolv/res_cache.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"45666038153690001846399313874865489341",
"121029191167295433463239274707675047298",
"156911704883462219028580431459047172205",
"116253718832685077838738497203562207841",
"98980925860437232333022731807146326496",
"64765367052314654415481601515343586214",
"69841921560366688830318407270307592208",
"170267317268118436511876125653467619323",
"238400344245562175750373170870059941127",
"113027334850970848911994446946788782559",
"315728008195130812126238736861561941428",
"235360770832995085276951288555327676526"
]
},
"id": "ASB-A-150371903-4c552606",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/e1ec3b167754930d4d87b48414f9d707554a02f0",
"target": {
"file": "resolv/libnetd_resolv_test.cpp"
}
},
{
"digest": {
"length": 2205.0,
"function_hash": "276003840044892323002727638461029047035"
},
"id": "ASB-A-150371903-51bf94d5",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/e1ec3b167754930d4d87b48414f9d707554a02f0",
"target": {
"function": "_resolv_cache_lookup",
"file": "resolv/res_cache.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/e1ec3b167754930d4d87b48414f9d707554a02f0"
],
"types": [
"ID"
],
"spl": "2020-12-01",
"severity": "High"
}