In sendvc of ressend.cpp, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"vanir_signatures": [
{
"digest": {
"length": 924.0,
"function_hash": "35539502111325755122583892640429564220"
},
"id": "ASB-A-161362564-1f62e3f6",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "DNSResponder::makeResponse",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 232.0,
"function_hash": "50916082365849672789076504343428662564"
},
"id": "ASB-A-161362564-26f8dfea",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "DNSHeader::write",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 224.0,
"function_hash": "325040015019392882349216064698903649657"
},
"id": "ASB-A-161362564-38461e1c",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "DNSRecord::toString",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"19756783086956684939464659653102880438",
"214656398470166395329039798452271724855",
"274751325116650072209976799435780589298",
"167388921186497990951347616861137744971",
"314795470702522144478260980722654769921",
"119227480009440006782918308909974885162",
"37196084167207773175407619960305818969",
"12704256509948936188603276781284078475",
"51234341079629310342239999201266407578"
]
},
"id": "ASB-A-161362564-52857790",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"file": "resolv_unit_test.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142723077593396276012672272027982628999",
"92143609247427214686239157749682395901",
"126802036219927382060963197075114743988",
"290070559627312500572116379896075330011",
"194566245163411723997410734521664604283",
"263736953840447124277505059261505231321",
"63943215951144050748809969911439280451",
"130107557102582169396650189605609244043"
]
},
"id": "ASB-A-161362564-67a7b536",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"file": "res_send.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"263625284088241163314098115131266134077",
"299915883986698326109224867548386455951",
"251312207096666937109133304613388166782",
"238074952560735563201118440376118731100",
"252601273707750423031494477996971189071",
"287819134503134567626415154978180388603",
"102538777449873772695991670935344787962",
"198869978076792170991500534162856720183",
"206318924502649792718994958689036107880",
"249332685859500533777568806818787824436",
"295018980358402084732345287198605703256",
"138410934917367099096807154716970024861",
"9013794960335182145933115268529203611",
"74325093781113951249297646497496540738",
"197043263226415807210935104582421041306",
"149497507326108708030571648188552443800",
"175332889266629744209431190811420468721",
"92559037487774276146700234684393547840",
"288587117179188015656690575905629138768",
"48039735758259285762908423955466416146",
"98078324473702097469785485929797241605",
"331718877125383386278057538765233613432",
"96260180906215686832630307372501509556",
"158190844951187984225430414404463700406"
]
},
"id": "ASB-A-161362564-7c65fd90",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 227.0,
"function_hash": "67678898904299609321920856213437602095"
},
"id": "ASB-A-161362564-bb1d98f8",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "DNSQuestion::toString",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 4468.0,
"function_hash": "187441872549794670462919906892566780987"
},
"id": "ASB-A-161362564-ce1d9c2d",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "send_vc",
"file": "res_send.cpp"
}
},
{
"digest": {
"length": 2686.0,
"function_hash": "116951451660065994402049747825323609413"
},
"id": "ASB-A-161362564-ef3a7382",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802",
"target": {
"function": "DNSResponder::handleQuery",
"file": "tests/dns_responder/dns_responder.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/DnsResolver/+/cf6ee247113426ef4e7365a86d00bb5430186802"
],
"types": [
"ID"
],
"spl": "2020-11-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142723077593396276012672272027982628999",
"92143609247427214686239157749682395901",
"126802036219927382060963197075114743988",
"75756922903077522798670206440624861463",
"197150037671742754570801066009693100319",
"140955806545385971315722335143108687325",
"256783501389096161798749163664437422023",
"109129369475202876932278717366227933960"
]
},
"id": "ASB-A-161362564-29505bee",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/bionic/+/43264bc36557db9a281b321aab16e574401dfddc",
"target": {
"file": "libc/dns/resolv/res_send.c"
}
},
{
"digest": {
"length": 4462.0,
"function_hash": "123310323820963798620423236766087222794"
},
"id": "ASB-A-161362564-42cfcea1",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/bionic/+/43264bc36557db9a281b321aab16e574401dfddc",
"target": {
"function": "send_vc",
"file": "libc/dns/resolv/res_send.c"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/bionic/+/43264bc36557db9a281b321aab16e574401dfddc"
],
"types": [
"ID"
],
"spl": "2020-11-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 4128.0,
"function_hash": "221494312084333970574832682945320117663"
},
"id": "ASB-A-161362564-60d42965",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/system/netd/+/11ad8ac8e1f6b3c7f50ca45b5de2f40e30f35cfb",
"target": {
"function": "send_vc",
"file": "resolv/res_send.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142723077593396276012672272027982628999",
"92143609247427214686239157749682395901",
"126802036219927382060963197075114743988",
"290070559627312500572116379896075330011",
"194566245163411723997410734521664604283",
"263736953840447124277505059261505231321",
"63943215951144050748809969911439280451",
"130107557102582169396650189605609244043"
]
},
"id": "ASB-A-161362564-ce0bee2e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/system/netd/+/11ad8ac8e1f6b3c7f50ca45b5de2f40e30f35cfb",
"target": {
"file": "resolv/res_send.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/system/netd/+/11ad8ac8e1f6b3c7f50ca45b5de2f40e30f35cfb"
],
"types": [
"ID"
],
"spl": "2020-11-01",
"severity": "High"
}{
"vanir_signatures": [
{
"digest": {
"length": 232.0,
"function_hash": "50916082365849672789076504343428662564"
},
"id": "ASB-A-161362564-004ce43f",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "DNSHeader::write",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 224.0,
"function_hash": "325040015019392882349216064698903649657"
},
"id": "ASB-A-161362564-1e93f510",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "DNSRecord::toString",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 924.0,
"function_hash": "35539502111325755122583892640429564220"
},
"id": "ASB-A-161362564-3e62af8e",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "DNSResponder::makeResponse",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"length": 227.0,
"function_hash": "67678898904299609321920856213437602095"
},
"id": "ASB-A-161362564-581da72a",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "DNSQuestion::toString",
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"142723077593396276012672272027982628999",
"92143609247427214686239157749682395901",
"126802036219927382060963197075114743988",
"290070559627312500572116379896075330011",
"194566245163411723997410734521664604283",
"263736953840447124277505059261505231321",
"63943215951144050748809969911439280451",
"130107557102582169396650189605609244043"
]
},
"id": "ASB-A-161362564-6805e5ca",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"file": "res_send.cpp"
}
},
{
"digest": {
"length": 4468.0,
"function_hash": "187441872549794670462919906892566780987"
},
"id": "ASB-A-161362564-bff2e9b9",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "send_vc",
"file": "res_send.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"263625284088241163314098115131266134077",
"299915883986698326109224867548386455951",
"251312207096666937109133304613388166782",
"238074952560735563201118440376118731100",
"252601273707750423031494477996971189071",
"287819134503134567626415154978180388603",
"102538777449873772695991670935344787962",
"198869978076792170991500534162856720183",
"206318924502649792718994958689036107880",
"249332685859500533777568806818787824436",
"295018980358402084732345287198605703256",
"138410934917367099096807154716970024861",
"9013794960335182145933115268529203611",
"74325093781113951249297646497496540738",
"197043263226415807210935104582421041306",
"149497507326108708030571648188552443800",
"175332889266629744209431190811420468721",
"92559037487774276146700234684393547840",
"288587117179188015656690575905629138768",
"48039735758259285762908423955466416146",
"98078324473702097469785485929797241605",
"331718877125383386278057538765233613432",
"96260180906215686832630307372501509556",
"158190844951187984225430414404463700406"
]
},
"id": "ASB-A-161362564-cdb7a622",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"file": "tests/dns_responder/dns_responder.cpp"
}
},
{
"digest": {
"threshold": 0.9,
"line_hashes": [
"19756783086956684939464659653102880438",
"214656398470166395329039798452271724855",
"274751325116650072209976799435780589298",
"167388921186497990951347616861137744971",
"314795470702522144478260980722654769921",
"119227480009440006782918308909974885162",
"37196084167207773175407619960305818969",
"12704256509948936188603276781284078475",
"51234341079629310342239999201266407578"
]
},
"id": "ASB-A-161362564-d1d2f153",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Line",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"file": "resolv_unit_test.cpp"
}
},
{
"digest": {
"length": 2686.0,
"function_hash": "116951451660065994402049747825323609413"
},
"id": "ASB-A-161362564-e0d0f820",
"deprecated": false,
"signature_version": "v1",
"signature_type": "Function",
"source": "https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192",
"target": {
"function": "DNSResponder::handleQuery",
"file": "tests/dns_responder/dns_responder.cpp"
}
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/DnsResolver/+/5214c6bebaadfe307579ee930fc650235b157192"
],
"types": [
"ID"
],
"spl": "2020-11-01",
"severity": "High"
}