PUB-A-237672190

See a problem?
Import Source
https://storage.googleapis.com/android-osv/PUB-A-237672190.json
JSON Data
https://api.osv.dev/v1/vulns/PUB-A-237672190
Aliases
  • A-237672190
  • CVE-2023-21001
Published
2023-03-01T00:00:00Z
Modified
2024-11-06T12:16:03.231308Z
Summary
[none]
Details

In onContextItemSelected of NetworkProviderSettings.java, there is a possible way for users to change the Wi-Fi settings of other users due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/packages/apps/Settings

Package

Name
platform/packages/apps/Settings

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-03-01

Affected versions

Other

13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "match_only_versions": [
                "13"
            ],
            "digest": {
                "length": 576.0,
                "function_hash": "85931917528647656650393916058361756571"
            },
            "id": "PUB-A-237672190-0117d4ff",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/network/NetworkProviderSettings.java",
                "function": "onContextItemSelected"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "13"
            ],
            "digest": {
                "length": 974.0,
                "function_hash": "18085920037116847978295049589634668536"
            },
            "id": "PUB-A-237672190-42ef2862",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/network/NetworkProviderSettings.java",
                "function": "onCreateContextMenu"
            },
            "signature_type": "Function"
        },
        {
            "match_only_versions": [
                "13"
            ],
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "72759330091169440706046299701103761556",
                    "251969557952653459090559889600811404176",
                    "320646116583179365368294083563730213317",
                    "101929945630366683448370742427132922943",
                    "148464962656289052051106198863838348353",
                    "77905500661677139232236866300303702674",
                    "71703739065708909952415041836772721085",
                    "209282554524430241113028537215243358836",
                    "236312533297466339603767855946449744476",
                    "301454096643885133867361433275108265674",
                    "81204061339564732056355095932318258971",
                    "86006563549833263809889335741260054671",
                    "92173793544998893813557468613625537171",
                    "314326959141032461913909579284862231984",
                    "139903985332960735288290740659866315909",
                    "109322724378208407728212352092235957599",
                    "89754640269905572923715566238785842771",
                    "329913307834130087282650055430470414456"
                ]
            },
            "id": "PUB-A-237672190-954592b7",
            "source": "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "src/com/android/settings/network/NetworkProviderSettings.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/packages/apps/Settings/+/dcfbccbfbc14df312f7fd60e33e50626112a80e3"
    ],
    "spl": "2023-03-01",
    "severity": "Moderate",
    "types": [
        "EoP"
    ]
}