PT-2022-6950 · Google · Android

Published 2022-08-11 · Updated 2022-08-15 · CVE-2022-20308

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Android versions Android-13

Description The issue is related to an insecure default value in hostapd, which could lead to a remote denial of service of the wifi hotspot. No additional execution privileges are needed, and user interaction is not required for exploitation. The vulnerability is associated with incorrect clearance or release of resources, allowing a remote attacker to cause a denial of service.

Recommendations For Android version Android-13, update to a version that includes a fix for this issue, as the current version has an insecure default value that could lead to a denial of service attack. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Weakness Enumeration

CWE-404

Related Identifiers

BDU:2023-05709

CVE-2022-20308

Affected Products

Android

References · 5

• https://source.android.com/security/bulletin/android-13 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-20308 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-20308 · Security Note
• https://bdu.fstec.ru/vul/2023-05709 · Security Note
• https://t.me/cibsecurity/48082 · Telegram Post