CVE-2022-20453: Path traversal leading to permanent DoS in TelephonyProvider
Summary
CVE-2022-20453: In update of MmsProvider.java, there is a possible constriction of directory permissions due to a path traversal error. Affects platform/packages/providers/TelephonyProvider across 5 version ranges.
>= 10:0, < 10:2022-11-01
>= 11:0, < 11:2022-11-01
>= 12:0, < 12:2022-11-01
>= 12L:0, < 12L:2022-11-01
>= 13:0, < 13:2022-11-01
Fixed in 10:2022-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
TelephonyProvider is a package in the Android ecosystem that provides telephony-related functionality to Android devices. It is responsible for managing MMS (Multimedia Messaging Service) data and interactions. MmsProvider.java is a component of TelephonyProvider that handles the update process. This vulnerability affects versions 10 and above of the Android platform. The vulnerability allows for a path traversal error, resulting in a constriction of directory permissions. This can lead to a local denial of service (DoS) attack on SIM recognition. Exploitation of this vulnerability requires user interaction.
Vulnerability Detail
The vulnerability in MmsProvider.java arises from a path traversal error in the update process. Due to this error, there is a constriction of directory permissions, which can be exploited to cause a local denial of service attack on SIM recognition. The attacker does not require additional execution privileges to exploit this vulnerability. The impact of this vulnerability is a permanent DoS on SIM recognition. It is important to note that user interaction is necessary for successful exploitation of this vulnerability.
How To Fix
Minimum fixed version
10:2022-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
There is no specific workaround mentioned for this vulnerability.
Conclusion
In conclusion, the TelephonyProvider package in the Android ecosystem is vulnerable to a path traversal issue in the MmsProvider.java component. This vulnerability can be exploited to cause a local denial of service attack on SIM recognition. It is recommended to apply the provided fix from the Android Open Source Project to mitigate this vulnerability. For further support on vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/providers/TelephonyProvider →
FAQ
TelephonyProvider is a package in the Android ecosystem that provides telephony-related functionality to Android devices. It is responsible for managing MMS data and interactions.
MmsProvider.java is a component of TelephonyProvider that handles the update process for MMS data.
A path traversal vulnerability occurs when an attacker can navigate outside of the intended directory structure and access files or directories that should be restricted.
SIM recognition refers to the process of identifying and authenticating the SIM card inserted in a mobile device.
Yes, user interaction is necessary for successful exploitation of this vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/providers/TelephonyProvider.
