CVE-2023-40100: Abrt in android::net::Experiments::getFlag in platform/packages/modules/DnsResolver
Summary
CVE-2023-40100: In discovery_thread of Dns64Configuration.cpp, there is a possible memory corruption due to a use after free. Affects platform/packages/modules/DnsResolver across 6 version ranges.
>= 11:0, < 11:2023-11-01
>= 12:0, < 12:2023-11-01
>= 12L:0, < 12L:2023-11-01
>= 13:0, < 13:2023-11-01
>= 14:0, < 14:2023-11-01
>= 14-next:0, < 14-next:2023-11-01
Fixed in 14-next:2023-11-01. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
The DnsResolver package is a component of the Android operating system that provides DNS resolution services. It is responsible for translating domain names into IP addresses, allowing devices to connect to websites and services on the internet. The package is an integral part of the Android networking stack and is used by various system components and applications. However, a vulnerability has been discovered in the DnsResolver package that could lead to local privilege escalation.
Vulnerability Detail
The vulnerability, identified as CVE-2023-40100, exists in the discovery_thread function of the Dns64Configuration.cpp file within the DnsResolver package. It is caused by a use-after-free memory corruption issue. An attacker can exploit this vulnerability to escalate their privileges on a local system without requiring any additional execution privileges. The vulnerability does not require user interaction for exploitation.
How To Fix
Minimum fixed version
14-next:2023-11-01
This is the first release that contains the fix.
Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
No specific workaround has been provided for this vulnerability. It is recommended to apply the official fix as mentioned in the 'how_to_fix' section.
Conclusion
The vulnerability in the DnsResolver package poses a risk of local privilege escalation. It is crucial to apply the available fix to ensure the security and integrity of affected Android devices. For further support and assistance in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for platform/packages/modules/DnsResolver →
FAQ
The vulnerability allows an attacker to escalate their privileges on a local system. This means that an attacker who already has limited access to a device can potentially gain higher privileges and perform unauthorized actions.
No, user interaction is not required for the exploitation of this vulnerability.
The vulnerability affects Android versions 11, 12, 12L, 13, and 14.
Yes, a fix has been released by the Android team. It is recommended to update the affected devices to the latest security patch.
More information about the fix can be found in the Android Open Source Project (AOSP) repository. The provided link in the 'affected' section of the vulnerability details leads to the specific commit that addresses the vulnerability.
Related vulnerabilities
Recent vulnerabilities recorded for platform/packages/modules/DnsResolver.
