Lucene search

GoogleOSV:ASB-A-262892300

HistoryApr 01, 2023 - 12:00 a.m.

Use sha256 for hashing Microdroid system/vendor image (for vbmeta descriptor) | Currently using sha1

2023-04-0100:00:00

Google

osv.dev

sha256

hashing

microdroid

vendor image

vbmeta descriptor

buildpropfile

filesystem

insecure hash

crypto

local escalation

privilege

system execution privileges

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

In buildPropFile of filesystem.go, there is a possible insecure hash due to an improperly used crypto. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

CPENameOperatorVersion
platform/build/soongeq13
platform/packages/modules/virtualizationeq13

CPE	Name	Operator	Version
	platform/build/soong	eq	13
	platform/packages/modules/virtualization	eq	13

References

android.googlesource.com/platform/build/soong/+/48d9ec056458a4bff78a9c572bc9c185dc037ccc

android.googlesource.com/platform/packages/modules/Virtualization/+/31782435ddf9c3641bf7c78cc64075dd95eede87

source.android.com/security/bulletin/2023-04-01

6.7 Medium

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

0.0004 Low

EPSS

Percentile

5.1%

JSON

Related for OSV:ASB-A-262892300