CVE-2022-20112: Arbitrary Modification of Malicious Private DNS in Guest Mode in platform/packages/apps/Settings
Summary
CVE-2022-20112: In getAvailabilityStatus of PrivateDnsPreferenceController.java, there is a possible way for a guest user to change private DNS settings due to a permissions bypass. Affects platform/packages/apps/Settings across 4 version ranges.
>= 10:0, < 10:2022-05-01
>= 11:0, < 11:2022-05-01
>= 12:0, < 12:2022-05-01
>= 12L:0, < 12L:2022-05-01
Fixed in 10:2022-05-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
Background
The platform/packages/apps/Settings package is a part of the Android ecosystem and is responsible for managing various settings on an Android device. It provides a user interface for users to configure system preferences, including network settings, display settings, and more. This package is present in Android versions 10, 11, 12, and 12L. The vulnerability described in this report allows a guest user to modify private DNS settings, bypassing the necessary permissions.
Vulnerability Detail
The vulnerability exists in the getAvailabilityStatus function of the PrivateDnsPreferenceController.java file. It allows a guest user to change private DNS settings without the required permissions. This can lead to a local privilege escalation attack, where the guest user gains elevated privileges without any additional execution privileges. Exploitation of this vulnerability does not require user interaction. The impact of this vulnerability is significant as it allows unauthorized modification of private DNS settings, potentially leading to DNS hijacking or other malicious activities.
How To Fix
Minimum fixed version
10:2022-05-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No workaround has been provided for this vulnerability.
Conclusion
In conclusion, the platform/packages/apps/Settings package in Android versions 10, 11, 12, and 12L is vulnerable to an arbitrary modification of malicious private DNS in guest mode. This vulnerability allows unauthorized users to change private DNS settings, potentially leading to DNS hijacking or other malicious activities. It is crucial to apply the provided fix and update the affected devices to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/apps/Settings →
FAQ
This vulnerability allows a guest user to modify private DNS settings, potentially leading to DNS hijacking or other malicious activities.
This vulnerability affects Android versions 10, 11, 12, and 12L.
No, user interaction is not needed for exploitation of this vulnerability.
This vulnerability is classified as high severity.
The recommended mitigation is to apply the provided fix from the Android Open Source Project (AOSP) and update the affected Android devices to the fixed versions.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/apps/Settings.
Habilume
Habit tracker with a companion that grows with you
Complete habits, earn Lume Points, and watch your Lume grow as you stay consistent.
