ASB-A-335232744

See a problem?

Import Source

https://storage.googleapis.com/android-osv/ASB-A-335232744.json

JSON Data

https://api.osv.dev/v1/vulns/ASB-A-335232744

Aliases

A-335232744
CVE-2024-34742

Published

2024-08-01T00:00:00Z

Modified

2024-11-06T12:16:03.231308Z

Summary

[none]

Details

In shouldWrite of OwnersData.java, there is a possible edge case that prevents MDM policies from being persisted due to a logic error in the code. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name: platform/frameworks/base

Affected ranges

Type: ECOSYSTEM
Events: Introduced

14-next:0

Fixed

14-next:2024-08-01

Affected versions

Other

14-next

Ecosystem specific

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "14-next"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "335939561984126118394382399411827842062",
                    "183570889948053597469373294041163375571",
                    "111520062570650909060472410205605243359",
                    "43194311473883171474817995426306700603"
                ]
            },
            "id": "ASB-A-335232744-3b4b1cb8",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java"
            },
            "signature_type": "Line"
        },
        {
            "match_only_versions": [
                "14-next"
            ],
            "digest": {
                "length": 124.0,
                "function_hash": "107521478979146943489792715445461572053"
            },
            "id": "ASB-A-335232744-55f0c25a",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/devicepolicy/java/com/android/server/devicepolicy/OwnersData.java",
                "function": "shouldWrite"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/aaa86cdfb79003fd66aae1132b9c06cfe80d7d08"
    ],
    "spl": "2024-08-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}