PUB-A-216854451

See a problem?

Import Source

https://storage.googleapis.com/android-osv/PUB-A-216854451.json

JSON Data

https://api.osv.dev/v1/vulns/PUB-A-216854451

Aliases

A-216854451
CVE-2023-21027

Published

2023-06-01T00:00:00Z

Modified

2026-04-17T15:55:28.020024Z

Summary

[none]

Details

In multiple functions of PasspointXmlUtils.java, there is a possible authentication misconfiguration due to a logic error in the code. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.

References

https://source.android.com/security/bulletin/2023-06-01

Affected packages

Android / platform/packages/modules/Wifi

Package

Name: platform/packages/modules/Wifi

Affected ranges

Type: ECOSYSTEM
Events: Introduced

13-next:0

Fixed

13-next:2023-06-01

Affected versions

Other

13-next

Ecosystem specific

{
    "spl": "2023-06-01",
    "severity": "Moderate",
    "vanir_signatures": [
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-0ee320f6",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializePolicy"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "290083469651611543641535717210570863213",
                "length": 1286.0
            }
        },
        {
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-5e0015bc",
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "signature_type": "Line",
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "80174087436758236836633457326330647065",
                    "315557012437673220810170157829419773944",
                    "301385060467560043398397990722610370856",
                    "115739237687785886848908767807691157515",
                    "63695100080596095375337861902670672563",
                    "121098488946366830996809607655192568915",
                    "285988519702346610045952736025790338789",
                    "280622283352007523235683680912340324035",
                    "253089557106518564555261960984861949363",
                    "227367220444911390396070512751436239335",
                    "59143366346620065050042048586272795047",
                    "118173766236620493576320029797475905769",
                    "227847672123788177483756528120166986943",
                    "3090994782136786573567402060798570356",
                    "167243309084936810434439082600877604638",
                    "215129471312705931988852348187526453998",
                    "83055688117071382997784699814498150144",
                    "238958499073310950219022397178267679835",
                    "71572441296608240305097661242713265465",
                    "287731953104111839472648725402721685802",
                    "167596000910703945951307011053458695824",
                    "188731101596687566837292533300557503996",
                    "247642894784488526975404966138965032068",
                    "300642125776832568512019389609116095372",
                    "322953454088348774032793132760638163660",
                    "298514292180236636875112884198215194537",
                    "202116351576427481889349324510218847077",
                    "123597671927639230484722658225077640666",
                    "309568861459555850584600889051332351238",
                    "314655280530855758434467260714487572544",
                    "142659709993933835882777418366530410982",
                    "336540310958305603432945212540498685390",
                    "182393571753960262733207070877519518143",
                    "38653323698627272467704529792665212001",
                    "37059332074870918395846449027605737205",
                    "266734671078492768984157423694939069984",
                    "249562441687446261901722301208918497845",
                    "243938404306532199996791886626149415257",
                    "299228430552300169432605474744186055788",
                    "173301297249271223641877064450837725810",
                    "6163961323942528898352621864135301069",
                    "131346005240135564575847113580151110583",
                    "26330445536564963792937722642781610816",
                    "76860649540595415916151753659913930420",
                    "220833793932630887661018849451212401783",
                    "50105821393706996249897848655091213053",
                    "229872452643955686559140138921089418416",
                    "238609066222050234973341281651682294259",
                    "240678954950221386416726410069431672207",
                    "29175832530981595282426051103757348054",
                    "109377290492715176436672637007207458707",
                    "307898045676248430734406054747620043376",
                    "262152438234714560176060529705787405791",
                    "99654169249552239078387129230010893741",
                    "188674091995815470687889951715607628715",
                    "307898045676248430734406054747620043376",
                    "262152438234714560176060529705787405791",
                    "99654169249552239078387129230010893741",
                    "193191864934769792685624442161329974419",
                    "173863535553332407937529653365809756445",
                    "22309715391212230544726586966297797155",
                    "152928562907443805486329981967789708572",
                    "13357947761068271709597049378851317179",
                    "139890190588514976250298243091408178272",
                    "82417286377279080061742580756041220322",
                    "333528805170256890067798953547068215271",
                    "227641793745921647221028696693912789345",
                    "232894142175507409247604278581513295684",
                    "139091353555289288926415529588302914090"
                ]
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-8810c978",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeSimCredential"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "52752624064682749376500859253461337132",
                "length": 567.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-a587e534",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeRoamingPartner"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "182753916842289381611868904052598074696",
                "length": 710.0
            }
        },
        {
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "serializePasspointConfiguration"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-b7686ee1",
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "signature_type": "Function",
            "digest": {
                "function_hash": "123113811758316236708212613481056450575",
                "length": 2208.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-b9099960",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeCertCredential"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "112712254450955274497604528555314796884",
                "length": 587.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-bba5cee9",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeCredential"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "182732029842243877911585727291507264491",
                "length": 1140.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-bc2c76d8",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeHomeSP"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "95194227724841036392789317959963487492",
                "length": 1008.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-d112359e",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeUpdateParameter"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "7786805147639718474554709940206759985",
                "length": 1028.0
            }
        },
        {
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-d6e367a0",
            "match_only_versions": [
                "13-next"
            ],
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializeUserCredential"
            },
            "signature_type": "Function",
            "digest": {
                "function_hash": "76573239701341361713818732764671800785",
                "length": 936.0
            }
        },
        {
            "target": {
                "file": "service/java/com/android/server/wifi/hotspot2/PasspointXmlUtils.java",
                "function": "deserializePasspointConfiguration"
            },
            "deprecated": false,
            "signature_version": "v1",
            "id": "PUB-A-216854451-e1398f7f",
            "source": "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860",
            "signature_type": "Function",
            "digest": {
                "function_hash": "168198516192563373035251530177287063856",
                "length": 2676.0
            }
        }
    ],
    "types": [
        "ID"
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/modules/Wifi/+/158a00b8973e280fda3a0b420851fb494f923860"
    ]
}

Database specific

source

"https://storage.googleapis.com/android-osv/PUB-A-216854451.json"