In get of PacProxyService.java, there is a possible system service crash due to improper input validation. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-23dc30af",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacManager.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-f78b48d6",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacManager.java",
"function": "get"
}
}
],
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4"
]
}
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-88d7e0a6",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacManager.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-aa785a7f",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacManager.java",
"function": "get"
}
}
],
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/6d6f4106948bbad67b9845603392d084078997c4"
]
}
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-235fad57",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java",
"function": "get"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-48d5fd24",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-8301ac01",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-d4ba9aca",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java",
"function": "get"
}
}
],
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7"
]
}
{
"severity": "High",
"spl": "2022-08-01",
"vanir_signatures": [
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-35b359e0",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-5a71ee94",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java",
"function": "get"
}
},
{
"signature_type": "Line",
"digest": {
"line_hashes": [
"86190834566979588039180141193482493171",
"303600187651083710211249546667631790915",
"199664307981176744344750625892476601904",
"179276276447717904611837717082188460977",
"327533619510778409940036610685920876994",
"260779311532663482353095973103429340781",
"162144524979438945718640329366595786392",
"50403743435597878699485083557349576773",
"76217712432441776287872860894137535175"
],
"threshold": 0.9
},
"id": "ASB-A-219498290-7b3ff69c",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java"
}
},
{
"signature_type": "Function",
"digest": {
"length": 670.0,
"function_hash": "283639389942770913289098218172683449500"
},
"id": "ASB-A-219498290-dc56e940",
"signature_version": "v1",
"deprecated": false,
"source": "https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"target": {
"file": "services/core/java/com/android/server/connectivity/PacProxyService.java",
"function": "get"
}
}
],
"types": [
"DoS"
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7",
"https://android.googlesource.com/platform/frameworks/base/+/fe57c5bf892c54c495cacd23492532bfa9a63dd7"
]
}