CVE-2021-0934: Denial of Service in platform/frameworks/base
Summary
CVE-2021-0934: In findAllDeAccounts of AccountsDb.java, there is a possible denial of service due to resource exhaustion. Affects platform/frameworks/base across 5 version ranges.
>= 10:0, < 10:2022-12-01
>= 11:0, < 11:2022-12-01
>= 12:0, < 12:2022-12-01
>= 12L:0, < 12L:2022-12-01
>= 13:0, < 13:2022-12-01
Fixed in 10:2022-12-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The package platform/frameworks/base is a part of the Android ecosystem and is responsible for providing core functionalities and services to the Android system. It includes various components and APIs that enable the functioning of the Android operating system. This package is vulnerable to a denial of service (DoS) attack due to resource exhaustion.
Vulnerability Detail
The vulnerability, identified as CVE-2021-0934, exists in the findAllDeAccounts function of the AccountsDb.java file. It allows an attacker to trigger a DoS attack by continually calling the addAccountExplicitly method. This can lead to resource exhaustion, resulting in a local DoS condition. The exploitation of this vulnerability does not require any additional execution privileges or user interaction.
How To Fix
Minimum fixed version
10:2022-12-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been mentioned for this vulnerability.
Conclusion
The vulnerability CVE-2021-0934 in the platform/frameworks/base package of the Android ecosystem can lead to a denial of service condition. It is crucial to update the package to the fixed version to mitigate the risk. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/frameworks/base →
FAQ
This vulnerability can lead to a denial of service condition in the Android system, causing resource exhaustion and potentially impacting the availability of the affected device.
No, user interaction is not required for the exploitation of this vulnerability.
This vulnerability affects Android versions 10, 11, 12, 12L, and 13.
The recommended mitigation is to update the platform/frameworks/base package to the fixed version.
No evidence of active exploitation of this vulnerability has been reported.
Related vulnerabilities
Recent vulnerabilities recorded for platform/frameworks/base.
