PUB-A-158482162

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-158482162.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-158482162
Aliases
  • A-158482162
  • CVE-2021-0554
Published
2021-06-01T00:00:00Z
Modified
2024-11-06T12:16:03.231308Z
Summary
[none]
Details

In isBackupServiceActive of BackupManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2021-06-01

Affected versions

Other

11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "126914617069042521820672816393767860066",
                    "318386150061405345264927717734983532266",
                    "221728323694342322381064209468492865777",
                    "112943111953274123551621343949152797386"
                ]
            },
            "id": "PUB-A-158482162-11c121f6",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d8b61b515938cecd441fae16fc001f1e49274780",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/backup/java/com/android/server/backup/BackupManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 350.0,
                "function_hash": "28817180968437617041860775752541731053"
            },
            "id": "PUB-A-158482162-33cff289",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4ab5af1eb569a46f2117377382aac7dc6535cfc5",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/backup/BackupManager.java",
                "function": "isBackupServiceActive"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 114.0,
                "function_hash": "338860830296859549198734532255695803967"
            },
            "id": "PUB-A-158482162-3996969e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4ab5af1eb569a46f2117377382aac7dc6535cfc5",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/backup/java/com/android/server/backup/BackupManagerService.java",
                "function": "isBackupServiceActive"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "24087718340648124539292189666993493388",
                    "43370372746142269335609137148714937238",
                    "334667390983267080210022985803336705149",
                    "238261442841438993754622866140726238788",
                    "17191668199990111124295222417548341558"
                ]
            },
            "id": "PUB-A-158482162-626a754f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4ab5af1eb569a46f2117377382aac7dc6535cfc5",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "core/java/android/app/backup/BackupManager.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "129895746813861046181917920049257664463",
                    "117620298669776704389805713989523918166",
                    "283586711839239482777439284503407201871",
                    "164910021130588734494249686894885703464",
                    "65078549187741724161603753187504472296",
                    "249312252837183729319575848739574603160",
                    "313324435522662445255318702827351870872",
                    "256749483367281802150299088835450164742",
                    "160656964486706790584917490903576418863",
                    "63058566019477163812682084827178406715",
                    "295747577431459138783214723720080232905",
                    "213631008609850099682204767038990613018"
                ]
            },
            "id": "PUB-A-158482162-7ffd5267",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d8b61b515938cecd441fae16fc001f1e49274780",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 377.0,
                "function_hash": "56334759618532062229800836102525878586"
            },
            "id": "PUB-A-158482162-9a8a5aa8",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/d8b61b515938cecd441fae16fc001f1e49274780",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/devicepolicy/java/com/android/server/devicepolicy/DevicePolicyManagerService.java",
                "function": "isBackupServiceEnabled"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "329065042415119750146087076341786792847",
                    "251388435269381718613865477082283272058",
                    "6730393615937548007520985769699600955",
                    "40146263960495807444905174138469593667"
                ]
            },
            "id": "PUB-A-158482162-b5624ab9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/4ab5af1eb569a46f2117377382aac7dc6535cfc5",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "services/backup/java/com/android/server/backup/BackupManagerService.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/d8b61b515938cecd441fae16fc001f1e49274780",
        "https://android.googlesource.com/platform/frameworks/base/+/b50cdde5f009ca1e8a548605c8b364d860110b67",
        "https://android.googlesource.com/platform/frameworks/base/+/4ab5af1eb569a46f2117377382aac7dc6535cfc5"
    ],
    "spl": "2021-06-01",
    "severity": "Moderate",
    "types": [
        "ID"
    ]
}