In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
{
"severity": "High",
"spl": "2023-10-01",
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61ba0e1b72469dbf4b4b196341b8d95cd2d3a4d4",
"digest": {
"function_hash": "113585915251600050840737985464826152653",
"length": 1288.0
},
"id": "ASB-A-275339978-528cad75",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validatePassword"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61ba0e1b72469dbf4b4b196341b8d95cd2d3a4d4",
"digest": {
"function_hash": "99345704220338475296555321776542753168",
"length": 1603.0
},
"id": "ASB-A-275339978-5ce7de18",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validateNetworkSpecifier"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/8f1ed4e94a6cb5392700fb8da4b564b7a548ed94",
"digest": {
"function_hash": "55002330786991901368189826932549673368",
"length": 1245.0
},
"id": "ASB-A-275339978-614ca38b",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61ba0e1b72469dbf4b4b196341b8d95cd2d3a4d4",
"digest": {
"function_hash": "236784019672658518815624879445234750931",
"length": 1378.0
},
"id": "ASB-A-275339978-82573a6c",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/61ba0e1b72469dbf4b4b196341b8d95cd2d3a4d4",
"digest": {
"line_hashes": [
"277607735639084051351437504779192166773",
"275272109878174997098877330116398300035",
"102248780572082772942682502836562741191",
"226695404626985187922228163108337185643",
"223863497369818824151785757794849820884",
"285824830631085011524908126291036255187",
"10417377664527959789120386808787365537",
"167014681808809880659126014864948163289",
"92689611994981323365855364355762243814",
"175959929607165481265354442586860177418",
"36582004452102026269888709699543818944",
"242592458990659869859401858806343232587",
"72498504964491964483091215477785973692",
"310759602393819232456026002533804064237",
"280625633156176909124279285935907555955",
"108774121511849080246919425505800467122",
"98033592057989793657005258415549438023",
"74054592468500533719530920506640680655",
"290278807920229706065169871956764975260",
"87013981375619148399668188576300254544",
"255563472405392100252498255894922625159",
"39442201759759100631421898540810658938",
"209065533806962386504656563623710953112",
"86104034918377382098733606763601336130",
"296288635783041596520802729005958419957",
"283775360949931226467525075293889413278",
"122402431697563111973107911625883648925",
"50513248689474124203453429516156951922"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-ba1bf904",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/8f1ed4e94a6cb5392700fb8da4b564b7a548ed94",
"digest": {
"line_hashes": [
"280625633156176909124279285935907555955",
"52497664229250534763402127255906375127",
"41573046369124035958448883129677742483",
"114301692649405901437296768948787992145"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-dbe45dd6",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/8f1ed4e94a6cb5392700fb8da4b564b7a548ed94",
"https://android.googlesource.com/platform/packages/modules/Wifi/+/61ba0e1b72469dbf4b4b196341b8d95cd2d3a4d4"
],
"types": [
"DoS"
]
}{
"severity": "High",
"spl": "2023-10-01",
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/07d112fb45449e06233b71e877e835084c76f220",
"digest": {
"function_hash": "312489270930895446294466225407114677400",
"length": 1460.0
},
"id": "ASB-A-275339978-3135cdbd",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/2cfaee8ef94211cdef61f407d953017e091c21d3",
"digest": {
"function_hash": "113585915251600050840737985464826152653",
"length": 1288.0
},
"id": "ASB-A-275339978-5b461a28",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validatePassword"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/2cfaee8ef94211cdef61f407d953017e091c21d3",
"digest": {
"line_hashes": [
"277607735639084051351437504779192166773",
"275272109878174997098877330116398300035",
"102248780572082772942682502836562741191",
"226695404626985187922228163108337185643",
"223863497369818824151785757794849820884",
"285824830631085011524908126291036255187",
"10417377664527959789120386808787365537",
"167014681808809880659126014864948163289",
"236131867145511192495273826929609218748",
"202940608673148701726041400286234883667",
"212785063169344534054029144752692102321",
"276677670992758589844036724217312231821",
"48911714279543181243147393997095898121",
"104421048252012530525891921803448095139",
"28313684436587869757716869422599383531",
"30159444304201286986814461603757733340",
"41736597873486734608381365532617209182",
"208500422576700638555251079192193249166",
"258752890773477084757874105013535067640",
"189764553452380397705438073863053617268",
"196946850723113820909800647366257136873",
"66078734857049080116444611205851295831",
"147768026194931991511672387660925128097",
"6346215782355281606905841954507294346",
"240784584241449273967698676220768734077",
"92834867786082982253206785194410700678",
"207433430883221126417899944956415713627",
"19671153462478535858871680576557232285"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-82a12d4d",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/2cfaee8ef94211cdef61f407d953017e091c21d3",
"digest": {
"function_hash": "56052002192152578299254926677868344896",
"length": 1612.0
},
"id": "ASB-A-275339978-a7266584",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/2cfaee8ef94211cdef61f407d953017e091c21d3",
"digest": {
"function_hash": "133501368348594951495572141339538919549",
"length": 1800.0
},
"id": "ASB-A-275339978-c0747f62",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validateNetworkSpecifier"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/07d112fb45449e06233b71e877e835084c76f220",
"https://android.googlesource.com/platform/frameworks/opt/net/wifi/+/2cfaee8ef94211cdef61f407d953017e091c21d3"
],
"types": [
"DoS"
]
}{
"severity": "High",
"spl": "2023-10-01",
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c914b0be9b553164b343ca981b5d57e163a4574",
"digest": {
"function_hash": "237310761690405457136832680786250504635",
"length": 1525.0
},
"id": "ASB-A-275339978-8a19f951",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validateNetworkSpecifier"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c914b0be9b553164b343ca981b5d57e163a4574",
"digest": {
"function_hash": "113585915251600050840737985464826152653",
"length": 1288.0
},
"id": "ASB-A-275339978-b9c37793",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validatePassword"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c914b0be9b553164b343ca981b5d57e163a4574",
"digest": {
"function_hash": "291374930995326476730066646699346418450",
"length": 1182.0
},
"id": "ASB-A-275339978-bc5ce57d",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/96aaf7f7b27f709b3cb06d054cb7e3fd92e890a1",
"digest": {
"line_hashes": [
"7110031840407855398778834953959674632",
"47435890087330794492572950125588576685",
"339116388075063873109332456679256793706"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-bd29d56a",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/96aaf7f7b27f709b3cb06d054cb7e3fd92e890a1",
"digest": {
"function_hash": "9151149505174826244639553215005358504",
"length": 1049.0
},
"id": "ASB-A-275339978-efdb6343",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/9c914b0be9b553164b343ca981b5d57e163a4574",
"digest": {
"line_hashes": [
"277607735639084051351437504779192166773",
"275272109878174997098877330116398300035",
"102248780572082772942682502836562741191",
"226695404626985187922228163108337185643",
"223863497369818824151785757794849820884",
"285824830631085011524908126291036255187",
"10417377664527959789120386808787365537",
"167014681808809880659126014864948163289",
"92689611994981323365855364355762243814",
"175959929607165481265354442586860177418",
"36582004452102026269888709699543818944",
"242592458990659869859401858806343232587",
"72498504964491964483091215477785973692",
"310759602393819232456026002533804064237",
"280625633156176909124279285935907555955",
"108774121511849080246919425505800467122",
"98033592057989793657005258415549438023",
"74054592468500533719530920506640680655",
"290278807920229706065169871956764975260",
"206689261907547811231663363266484882795",
"255563472405392100252498255894922625159",
"39442201759759100631421898540810658938",
"209065533806962386504656563623710953112",
"86104034918377382098733606763601336130",
"296288635783041596520802729005958419957",
"283775360949931226467525075293889413278",
"122402431697563111973107911625883648925",
"50513248689474124203453429516156951922"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-fd243616",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/96aaf7f7b27f709b3cb06d054cb7e3fd92e890a1",
"https://android.googlesource.com/platform/packages/modules/Wifi/+/9c914b0be9b553164b343ca981b5d57e163a4574"
],
"types": [
"DoS"
]
}{
"severity": "High",
"spl": "2023-10-01",
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/a4450ec66cea1efac9b6ff2133e0cec5f6faad91",
"digest": {
"function_hash": "237310761690405457136832680786250504635",
"length": 1525.0
},
"id": "ASB-A-275339978-14e7d40e",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validateNetworkSpecifier"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/a4450ec66cea1efac9b6ff2133e0cec5f6faad91",
"digest": {
"function_hash": "291374930995326476730066646699346418450",
"length": 1182.0
},
"id": "ASB-A-275339978-3e47a40f",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/ea89795defa507bb7f0897e97d126eb4e76b6597",
"digest": {
"function_hash": "9151149505174826244639553215005358504",
"length": 1049.0
},
"id": "ASB-A-275339978-42055fc8",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/a4450ec66cea1efac9b6ff2133e0cec5f6faad91",
"digest": {
"line_hashes": [
"277607735639084051351437504779192166773",
"275272109878174997098877330116398300035",
"102248780572082772942682502836562741191",
"226695404626985187922228163108337185643",
"223863497369818824151785757794849820884",
"285824830631085011524908126291036255187",
"10417377664527959789120386808787365537",
"167014681808809880659126014864948163289",
"92689611994981323365855364355762243814",
"175959929607165481265354442586860177418",
"36582004452102026269888709699543818944",
"242592458990659869859401858806343232587",
"72498504964491964483091215477785973692",
"310759602393819232456026002533804064237",
"280625633156176909124279285935907555955",
"108774121511849080246919425505800467122",
"98033592057989793657005258415549438023",
"74054592468500533719530920506640680655",
"290278807920229706065169871956764975260",
"206689261907547811231663363266484882795",
"255563472405392100252498255894922625159",
"39442201759759100631421898540810658938",
"209065533806962386504656563623710953112",
"86104034918377382098733606763601336130",
"296288635783041596520802729005958419957",
"283775360949931226467525075293889413278",
"122402431697563111973107911625883648925",
"50513248689474124203453429516156951922"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-81929496",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/a4450ec66cea1efac9b6ff2133e0cec5f6faad91",
"digest": {
"function_hash": "113585915251600050840737985464826152653",
"length": 1288.0
},
"id": "ASB-A-275339978-ce369c32",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validatePassword"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/ea89795defa507bb7f0897e97d126eb4e76b6597",
"digest": {
"line_hashes": [
"7110031840407855398778834953959674632",
"47435890087330794492572950125588576685",
"339116388075063873109332456679256793706"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-f2c12f1f",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/ea89795defa507bb7f0897e97d126eb4e76b6597",
"https://android.googlesource.com/platform/packages/modules/Wifi/+/a4450ec66cea1efac9b6ff2133e0cec5f6faad91"
],
"types": [
"DoS"
]
}{
"severity": "High",
"spl": "2023-10-01",
"vanir_signatures": [
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/36deae20de1a8905e6cc72764e449b2d6e469f9e",
"digest": {
"function_hash": "237310761690405457136832680786250504635",
"length": 1525.0
},
"id": "ASB-A-275339978-0b87678c",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validateNetworkSpecifier"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/c4142aedf5a09294cd4f2b184a1564b1c4e203ba",
"digest": {
"line_hashes": [
"280625633156176909124279285935907555955",
"52497664229250534763402127255906375127",
"41573046369124035958448883129677742483",
"114301692649405901437296768948787992145"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-0bffde25",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/36deae20de1a8905e6cc72764e449b2d6e469f9e",
"digest": {
"function_hash": "113585915251600050840737985464826152653",
"length": 1288.0
},
"id": "ASB-A-275339978-1f3f38d0",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validatePassword"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/c4142aedf5a09294cd4f2b184a1564b1c4e203ba",
"digest": {
"function_hash": "55002330786991901368189826932549673368",
"length": 1245.0
},
"id": "ASB-A-275339978-5d1072a1",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Function",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/36deae20de1a8905e6cc72764e449b2d6e469f9e",
"digest": {
"function_hash": "236784019672658518815624879445234750931",
"length": 1378.0
},
"id": "ASB-A-275339978-7b0fea98",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java",
"function": "validate"
},
"deprecated": false
},
{
"signature_type": "Line",
"signature_version": "v1",
"source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/36deae20de1a8905e6cc72764e449b2d6e469f9e",
"digest": {
"line_hashes": [
"277607735639084051351437504779192166773",
"275272109878174997098877330116398300035",
"102248780572082772942682502836562741191",
"226695404626985187922228163108337185643",
"223863497369818824151785757794849820884",
"285824830631085011524908126291036255187",
"10417377664527959789120386808787365537",
"167014681808809880659126014864948163289",
"92689611994981323365855364355762243814",
"175959929607165481265354442586860177418",
"36582004452102026269888709699543818944",
"242592458990659869859401858806343232587",
"72498504964491964483091215477785973692",
"310759602393819232456026002533804064237",
"280625633156176909124279285935907555955",
"108774121511849080246919425505800467122",
"98033592057989793657005258415549438023",
"74054592468500533719530920506640680655",
"290278807920229706065169871956764975260",
"87013981375619148399668188576300254544",
"255563472405392100252498255894922625159",
"39442201759759100631421898540810658938",
"209065533806962386504656563623710953112",
"86104034918377382098733606763601336130",
"296288635783041596520802729005958419957",
"283775360949931226467525075293889413278",
"122402431697563111973107911625883648925",
"50513248689474124203453429516156951922"
],
"threshold": 0.9
},
"id": "ASB-A-275339978-8869932b",
"target": {
"file": "service/java/com/android/server/wifi/WifiConfigurationUtil.java"
},
"deprecated": false
}
],
"fixes": [
"https://android.googlesource.com/platform/packages/modules/Wifi/+/c4142aedf5a09294cd4f2b184a1564b1c4e203ba",
"https://android.googlesource.com/platform/packages/modules/Wifi/+/36deae20de1a8905e6cc72764e449b2d6e469f9e"
],
"types": [
"DoS"
]
}