CVE-2022-20143

EPSS 0.02%
Veröffentlicht 15.06.2022 14:15:11
Zuletzt bearbeitet 21.11.2024 06:42:14
Quelle security@android.com
CVE-Watchlists
Login
Unerledigt
Login

In addAutomaticZenRule of ZenModeHelper.java, there is a possible permanent denial of service due to resource exhaustion. This could lead to local denial of service with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11 Android-12 Android-12LAndroid ID: A-220735360

Betroffene Produkte Warnungen 0 Metriken 3 CWE 1 Referenzen 4

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Google ≫ Android Version10.0

Google ≫ Android Version11.0

Google ≫ Android Version12.0

Google ≫ Android Version12.1

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.02%	0.019

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5.5	1.8	3.6	CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
nvd@nist.gov	4.9	3.9	6.9	AV:L/AC:L/Au:N/C:N/I:N/A:C

CWE-770 Allocation of Resources Without Limits or Throttling

The product allocates a reusable resource or group of resources on behalf of an actor without imposing any restrictions on the size or number of resources that can be allocated, in violation of the intended security policy for that actor.

https://source.android.com/security/bulletin/2022-06-01

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2022-20143

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-20143

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-20143

EUVD