ASB-A-246541702

See a problem?
Import Source
https://storage.googleapis.com/android-osv/ASB-A-246541702.json
JSON Data
https://api.osv.dev/v1/vulns/ASB-A-246541702
Aliases
  • A-246541702
  • CVE-2023-21137
Published
2023-06-01T00:00:00Z
Modified
2024-08-07T19:29:43.515881Z
Summary
Permanent denial of service via JobScheduler#schedule with invalid NetworkCapabilities.mTransportTypes
Details

In several methods of JobStore.java, uncaught exceptions in job map parsing could lead to local persistent denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

References

Affected packages

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13-next:0
Fixed
13-next:2023-06-01

Affected versions

Other

13-next

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "88748618308055000220281674766198731040",
                    "249396715037558805745221194740979561064",
                    "164301605750507272451520189089934655050",
                    "109795612308487052653223368718562200607",
                    "155887119447236720631965822184620922830",
                    "195462494314817103218167905857025189667",
                    "181057859908330440942386339798719726241",
                    "55707820669319239591884054813340303362",
                    "76508389472740143566711447382965763458",
                    "6036956544649657987674883707972804403",
                    "185064586106528140455954287194035703738",
                    "310769436540893605940414805746805545034",
                    "98497899714125290758167772968008829574"
                ]
            },
            "id": "ASB-A-246541702-2449bf70",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 5097.0,
                "function_hash": "159803640029266232665177633215008020851"
            },
            "id": "ASB-A-246541702-552632cd",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "restoreJobFromXml"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1103.0,
                "function_hash": "136545259088351736556952524132594636377"
            },
            "id": "ASB-A-246541702-944a2191",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "run"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/c98fb42b480b3beedc2d94de6110f50212c4aa0b"
    ],
    "spl": "2023-06-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
11:0
Fixed
11:2023-06-01

Affected versions

Other

11

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 4611.0,
                "function_hash": "246742673806852824031168716262510995243"
            },
            "id": "ASB-A-246541702-322472c5",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "restoreJobFromXml"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "63855270129629367971985376108846616096"
            },
            "id": "ASB-A-246541702-5be1527e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "run"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "88748618308055000220281674766198731040",
                    "249396715037558805745221194740979561064",
                    "164301605750507272451520189089934655050",
                    "109795612308487052653223368718562200607",
                    "191092451028706471989826207359428222321",
                    "176948151945717884359093361413297039595",
                    "312007121508315593880636888456202924387",
                    "55707820669319239591884054813340303362",
                    "76508389472740143566711447382965763458",
                    "6036956544649657987674883707972804403",
                    "185064586106528140455954287194035703738",
                    "310769436540893605940414805746805545034",
                    "98497899714125290758167772968008829574",
                    "184444492363715158236138147782101578844",
                    "251858206377763059149894888984118969576",
                    "45402239069496976582529813712329354330",
                    "70547789342647153197139359616031552629"
                ]
            },
            "id": "ASB-A-246541702-8196290a",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1650.0,
                "function_hash": "144351440169903802785837934162513148992"
            },
            "id": "ASB-A-246541702-e346307f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "buildConstraintsFromXml"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/df1ba00dd9f64a3ae9a9e05979dfae6a15c7e203"
    ],
    "spl": "2023-06-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12:0
Fixed
12:2023-06-01

Affected versions

Other

12

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "88748618308055000220281674766198731040",
                    "249396715037558805745221194740979561064",
                    "164301605750507272451520189089934655050",
                    "109795612308487052653223368718562200607",
                    "155887119447236720631965822184620922830",
                    "195462494314817103218167905857025189667",
                    "181057859908330440942386339798719726241",
                    "55707820669319239591884054813340303362",
                    "76508389472740143566711447382965763458",
                    "6036956544649657987674883707972804403",
                    "185064586106528140455954287194035703738",
                    "310769436540893605940414805746805545034",
                    "98497899714125290758167772968008829574"
                ]
            },
            "id": "ASB-A-246541702-1ec8602e",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "63855270129629367971985376108846616096"
            },
            "id": "ASB-A-246541702-b4bc27d5",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "run"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 4851.0,
                "function_hash": "249545300660216615314541107259671027997"
            },
            "id": "ASB-A-246541702-ba3db81d",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "restoreJobFromXml"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/7bdc1e8a3affd8534a829744001ef3ea26cce074"
    ],
    "spl": "2023-06-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
12L:0
Fixed
12L:2023-06-01

Affected versions

Other

12L

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 4851.0,
                "function_hash": "249545300660216615314541107259671027997"
            },
            "id": "ASB-A-246541702-9b404828",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "restoreJobFromXml"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "88748618308055000220281674766198731040",
                    "249396715037558805745221194740979561064",
                    "164301605750507272451520189089934655050",
                    "109795612308487052653223368718562200607",
                    "155887119447236720631965822184620922830",
                    "195462494314817103218167905857025189667",
                    "181057859908330440942386339798719726241",
                    "55707820669319239591884054813340303362",
                    "76508389472740143566711447382965763458",
                    "6036956544649657987674883707972804403",
                    "185064586106528140455954287194035703738",
                    "310769436540893605940414805746805545034",
                    "98497899714125290758167772968008829574"
                ]
            },
            "id": "ASB-A-246541702-ede0455f",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
            },
            "signature_type": "Line"
        },
        {
            "digest": {
                "length": 1112.0,
                "function_hash": "63855270129629367971985376108846616096"
            },
            "id": "ASB-A-246541702-f016ac98",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "run"
            },
            "signature_type": "Function"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/53522d89c172898ae4ea07533dbc43666cbb1924"
    ],
    "spl": "2023-06-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}

Android / platform/frameworks/base

Package

Name
platform/frameworks/base

Affected ranges

Type
ECOSYSTEM
Events
Introduced
13:0
Fixed
13:2023-06-01

Affected versions

Other

13

Ecosystem specific 

{
    "vanir_signatures": [
        {
            "digest": {
                "length": 1103.0,
                "function_hash": "136545259088351736556952524132594636377"
            },
            "id": "ASB-A-246541702-1df10915",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "run"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "length": 5097.0,
                "function_hash": "159803640029266232665177633215008020851"
            },
            "id": "ASB-A-246541702-9ace8e00",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java",
                "function": "restoreJobFromXml"
            },
            "signature_type": "Function"
        },
        {
            "digest": {
                "threshold": 0.9,
                "line_hashes": [
                    "88748618308055000220281674766198731040",
                    "249396715037558805745221194740979561064",
                    "164301605750507272451520189089934655050",
                    "109795612308487052653223368718562200607",
                    "155887119447236720631965822184620922830",
                    "195462494314817103218167905857025189667",
                    "181057859908330440942386339798719726241",
                    "55707820669319239591884054813340303362",
                    "76508389472740143566711447382965763458",
                    "6036956544649657987674883707972804403",
                    "185064586106528140455954287194035703738",
                    "310769436540893605940414805746805545034",
                    "98497899714125290758167772968008829574"
                ]
            },
            "id": "ASB-A-246541702-b74291d9",
            "source": "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629",
            "deprecated": false,
            "signature_version": "v1",
            "target": {
                "file": "apex/jobscheduler/service/java/com/android/server/job/JobStore.java"
            },
            "signature_type": "Line"
        }
    ],
    "fixes": [
        "https://android.googlesource.com/platform/frameworks/base/+/8c8d1c0dfe94f9431bc8094773b2998c9912a629"
    ],
    "spl": "2023-06-01",
    "severity": "High",
    "types": [
        "DoS"
    ]
}