CVE-2023-20910
First published: Fri Mar 24 2023(Updated: )
In add of WifiNetworkSuggestionsManager.java, there is a possible way to trigger permanent DoS due to resource exhaustion. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploitation.
Credit: security@android.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android | =11.0 | |
| Android | =12.0 | |
| Android | =12.1 | |
| Android | =13.0 | |
| Android | ||
| =11.0 | ||
| =12.0 | ||
| =12.1 | ||
| =13.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://android.googlesource.com/platform/packages/modules/Wifi/+/d7df9d633c2726fa2bee8739c9ba274f300e1ea9
- https://android.googlesource.com/platform/packages/modules/Wifi/+/8827591ae680c4d0bd0e373d4ca20cb35f53faa6
- https://source.android.com/docs/security/bulletin/2023-07-01 (Advisory)
- https://source.android.com/security/bulletin/2023-07-01
Frequently Asked Questions
What is the severity of CVE-2023-20910?
CVE-2023-20910 is classified as a local denial of service vulnerability due to resource exhaustion.
How do I fix CVE-2023-20910?
To mitigate CVE-2023-20910, it is recommended to update your Android version to the latest security patch.
Which versions of Android are affected by CVE-2023-20910?
CVE-2023-20910 affects Android versions 11.0, 12.0, 12.1, and 13.0.
Does CVE-2023-20910 require user interaction for exploitation?
No, CVE-2023-20910 can be exploited without any user interaction.
What could be the impact of CVE-2023-20910?
The impact of CVE-2023-20910 is a local denial of service that can lead to device instability.
- agent/type
- agent/severity
- agent/weakness
- agent/references
- agent/author
- agent/description
- agent/first-publish-date
- agent/event
- agent/last-modified-date
- agent/source
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/android-source
- source/Android
- agent/software-canonical-lookup
- collector/mitre-cve
- source/MITRE
- collector/nvd-api
- source/NVD
- vendor/google
- canonical/android
- version/android/11.0
- version/android/12.0
- version/android/12.1
- version/android/13.0