Security
Headlines
HeadlinesLatestCVEs

Headline

CVE-2023-21252

In validatePassword of WifiConfigurationUtil.java, there is a possible way to get the device into a boot loop due to improper input validation. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.

CVE
#android#google#dos#java#auth#wifi

)]}’ { "commit": "044ab0684153c4effb9f4fda47df43ccdc77bda8", "tree": "d786ec3072552eeedf795fc886e3833f7ebbfcaf", "parents": [ “69119d1d3102e27b6473c785125696881bce9563” ], "author": { "name": "Nate(Qiang) Jiang", "email": "[email protected]", "time": “Thu Apr 13 00:16:16 2023 +0000” }, "committer": { "name": "Android Build Coastguard Worker", "email": "[email protected]", "time": “Thu May 11 18:41:37 2023 +0000” }, "message": "Add pre-share key check for wapi\n\nBug: 275339978\nTest: atest com.androi.server.wifi\n(cherry picked from https://googleplex-android-review.googlesource.com/q/commit:c4142aedf5a09294cd4f2b184a1564b1c4e203ba)\nMerged-In: Id37e395f4f4f05b7901b718e3ea84c56b95cdfe7\nChange-Id: Id37e395f4f4f05b7901b718e3ea84c56b95cdfe7\n", "tree_diff": [ { "type": "modify", "old_id": "907ca721ddb563c166c450d7800df3065d1d90a4", "old_mode": 33188, "old_path": "service/java/com/android/server/wifi/WifiConfigurationUtil.java", "new_id": "4a594b7a2a64d17ee94a36dc29069075b21756fe", "new_mode": 33188, "new_path": “service/java/com/android/server/wifi/WifiConfigurationUtil.java” }, { "type": "modify", "old_id": "b707b1d6b06fe564632f77f4e4d61c0fe3f394c9", "old_mode": 33188, "old_path": "service/tests/wifitests/src/com/android/server/wifi/WifiConfigManagerTest.java", "new_id": "20baf931e431ea0bccf622ea5984721ed35889a4", "new_mode": 33188, "new_path": “service/tests/wifitests/src/com/android/server/wifi/WifiConfigManagerTest.java” }, { "type": "modify", "old_id": "e3b3253c3a7de6bf17aaeee4bc68cfa66d40ceca", "old_mode": 33188, "old_path": "service/tests/wifitests/src/com/android/server/wifi/WifiConfigurationUtilTest.java", "new_id": "7cabcd873ac43329db127d6613dedfb974f9484d", "new_mode": 33188, "new_path": “service/tests/wifitests/src/com/android/server/wifi/WifiConfigurationUtilTest.java” } ] }

CVE: Latest News

CVE-2023-50976: Transactions API Authorization by oleiman · Pull Request #14969 · redpanda-data/redpanda
CVE-2023-6905
CVE-2023-6903
CVE-2023-6904
CVE-2023-3907