Lucene search

K
nvd[email protected]NVD:CVE-2021-25342
HistoryMar 04, 2021 - 10:15 p.m.

CVE-2021-25342

2021-03-0422:15:13
CWE-287
web.nvd.nist.gov
4
non-existent provider
unauthorized actions
dos hijack

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0

Percentile

5.1%

Calling of non-existent provider in SMP sdk prior to version 3.0.9 allows unauthorized actions including denial of service attack by hijacking the provider.

Affected configurations

Nvd
Node
googleandroidMatch1.0
OR
googleandroidMatch1.1
OR
googleandroidMatch1.5
OR
googleandroidMatch1.6
OR
googleandroidMatch2.0
OR
googleandroidMatch2.0.1
OR
googleandroidMatch2.1
OR
googleandroidMatch2.2
OR
googleandroidMatch2.2rev1
OR
googleandroidMatch2.2.1
OR
googleandroidMatch2.2.2
OR
googleandroidMatch2.2.3
OR
googleandroidMatch2.3
OR
googleandroidMatch2.3rev1
OR
googleandroidMatch2.3.1
OR
googleandroidMatch2.3.2
OR
googleandroidMatch2.3.3
OR
googleandroidMatch2.3.4
OR
googleandroidMatch2.3.5
OR
googleandroidMatch2.3.6
OR
googleandroidMatch2.3.7
OR
googleandroidMatch3.0
OR
googleandroidMatch3.1
OR
googleandroidMatch3.2
OR
googleandroidMatch3.2.1
OR
googleandroidMatch3.2.2
OR
googleandroidMatch3.2.4
OR
googleandroidMatch3.2.6
OR
googleandroidMatch4.0
OR
googleandroidMatch4.0.1
OR
googleandroidMatch4.0.2
OR
googleandroidMatch4.0.3
OR
googleandroidMatch4.0.4
OR
googleandroidMatch4.1
OR
googleandroidMatch4.1.1
OR
googleandroidMatch4.1.2
OR
googleandroidMatch4.2
OR
googleandroidMatch4.2.1
OR
googleandroidMatch4.2.2
OR
googleandroidMatch4.3
OR
googleandroidMatch4.3.1
OR
googleandroidMatch4.4
OR
googleandroidMatch4.4.1
OR
googleandroidMatch4.4.2
OR
googleandroidMatch4.4.3
OR
googleandroidMatch4.4.4
OR
googleandroidMatch5.0
OR
googleandroidMatch5.0.1
OR
googleandroidMatch5.0.2
OR
googleandroidMatch5.1
OR
googleandroidMatch5.1.0
OR
googleandroidMatch5.1.1
OR
googleandroidMatch6.0
OR
googleandroidMatch6.0.1
OR
googleandroidMatch7.0
OR
googleandroidMatch7.1.0
OR
googleandroidMatch7.1.1
OR
googleandroidMatch7.1.2
OR
googleandroidMatch8.0
AND
samsungmembersRange<2.4.81.13
Node
googleandroidMatch9.0
OR
googleandroidMatch10.0
OR
googleandroidMatch11.0
AND
samsungmembersRange<3.8.00.13
VendorProductVersionCPE
googleandroid1.0cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*
googleandroid1.1cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*
googleandroid1.5cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*
googleandroid1.6cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*
googleandroid2.0cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*
googleandroid2.0.1cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*
googleandroid2.1cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*
googleandroid2.2cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*
googleandroid2.2cpe:2.3:o:google:android:2.2:rev1:*:*:*:*:*:*
googleandroid2.2.1cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*
Rows per page:
1-10 of 631

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:L/AC:L/Au:N/C:N/I:N/A:P

CVSS3

3.3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L

EPSS

0

Percentile

5.1%

Related for NVD:CVE-2021-25342