In notifyProfileAdded and notifyProfileRemoved of SipService.java, there is a possible way to retrieve SIP account names due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51"
],
"spl": "2021-07-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"digest": {
"line_hashes": [
"324165774425901303033260974682821836678",
"267816130074900962991056862858825009859",
"205933951454668140980155405962033342310",
"262340725339278562786587610369496961426",
"211962389773027252506433223025450746398",
"52252619083521041888357330750494047092",
"111264149223416382542478689493324998235",
"142531742533842872343024447002722554646"
],
"threshold": 0.9
},
"id": "ASB-A-176496502-2fb819be"
},
{
"id": "ASB-A-176496502-a06e6262",
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileAdded"
},
"signature_type": "Function",
"digest": {
"function_hash": "324688000471698648112247954960202636470",
"length": 316.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false
},
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileRemoved"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"signature_version": "v1",
"digest": {
"function_hash": "203460942589421303264537071595245286161",
"length": 321.0
},
"id": "ASB-A-176496502-bb106c4b",
"signature_type": "Function"
}
]
}{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51"
],
"spl": "2021-07-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileAdded"
},
"signature_type": "Function",
"digest": {
"function_hash": "324688000471698648112247954960202636470",
"length": 316.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"id": "ASB-A-176496502-4580a100"
},
{
"id": "ASB-A-176496502-838a4397",
"target": {
"file": "src/java/com/android/server/sip/SipService.java"
},
"signature_type": "Line",
"digest": {
"line_hashes": [
"324165774425901303033260974682821836678",
"267816130074900962991056862858825009859",
"205933951454668140980155405962033342310",
"262340725339278562786587610369496961426",
"211962389773027252506433223025450746398",
"52252619083521041888357330750494047092",
"111264149223416382542478689493324998235",
"142531742533842872343024447002722554646"
],
"threshold": 0.9
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false
},
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileRemoved"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"digest": {
"function_hash": "203460942589421303264537071595245286161",
"length": 321.0
},
"id": "ASB-A-176496502-fb668292",
"signature_type": "Function",
"signature_version": "v1"
}
]
}{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51"
],
"spl": "2021-07-01",
"vanir_signatures": [
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java"
},
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"digest": {
"line_hashes": [
"324165774425901303033260974682821836678",
"267816130074900962991056862858825009859",
"205933951454668140980155405962033342310",
"262340725339278562786587610369496961426",
"211962389773027252506433223025450746398",
"52252619083521041888357330750494047092",
"111264149223416382542478689493324998235",
"142531742533842872343024447002722554646"
],
"threshold": 0.9
},
"id": "ASB-A-176496502-50642126"
},
{
"id": "ASB-A-176496502-8eb2bb33",
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileAdded"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false,
"digest": {
"function_hash": "324688000471698648112247954960202636470",
"length": 316.0
}
},
{
"id": "ASB-A-176496502-93d05835",
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileRemoved"
},
"signature_type": "Function",
"digest": {
"function_hash": "203460942589421303264537071595245286161",
"length": 321.0
},
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false
}
]
}{
"types": [
"ID"
],
"severity": "High",
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51"
],
"spl": "2021-07-01",
"vanir_signatures": [
{
"id": "ASB-A-176496502-778e3fd7",
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileAdded"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false,
"digest": {
"function_hash": "324688000471698648112247954960202636470",
"length": 316.0
}
},
{
"id": "ASB-A-176496502-a266f39b",
"target": {
"file": "src/java/com/android/server/sip/SipService.java",
"function": "notifyProfileRemoved"
},
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"deprecated": false,
"digest": {
"function_hash": "203460942589421303264537071595245286161",
"length": 321.0
}
},
{
"deprecated": false,
"target": {
"file": "src/java/com/android/server/sip/SipService.java"
},
"source": "https://android.googlesource.com/platform/frameworks/opt/net/voip/+/0e459673aa944d65989181b659c820504117ab51",
"signature_version": "v1",
"digest": {
"line_hashes": [
"324165774425901303033260974682821836678",
"267816130074900962991056862858825009859",
"205933951454668140980155405962033342310",
"262340725339278562786587610369496961426",
"211962389773027252506433223025450746398",
"52252619083521041888357330750494047092",
"111264149223416382542478689493324998235",
"142531742533842872343024447002722554646"
],
"threshold": 0.9
},
"id": "ASB-A-176496502-d02cede9",
"signature_type": "Line"
}
]
}