CVE-2020-0022
Android Bluetooth Remote Denial Of Service
Severity Score
8.8
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
4
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
Attend
*SSVC
Descriptions
In reassemble_and_dispatch of packet_fragmenter.cc, there is possible out of bounds write due to an incorrect bounds calculation. This could lead to remote code execution over Bluetooth with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1 Android-9 Android-10Android ID: A-143894715
En la función reassemble_and_dispatch del archivo packet_fragmenter.cc, es posible una escritura fuera de límites debido a un cálculo de límites incorrecto. Esto podría conllevar a una ejecución de código remota por medio del Bluetooth sin ser necesarios privilegios de ejecución adicionales. No es necesaria una interacción del usuario para su explotación. Producto: Android, Versiones: Android-8.0 Android-8.1 Android-9 Android-10, ID de Android: A-143894715.
Android suffers from a bluetooth remote denial of service vulnerability.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:Attend
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-10-17 CVE Reserved
- 2020-02-13 CVE Published
- 2021-02-24 First Exploit
- 2024-02-03 EPSS Updated
- 2024-08-04 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-682: Incorrect Calculation
CAPEC
References (7)
| URL | Tag | Source |
|---|---|---|
| http://seclists.org/fulldisclosure/2020/Feb/10 | Mailing List |
|
| http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20200513-03-smartphone-en | Third Party Advisory |
| URL | Date | SRC |
|---|---|---|
| https://github.com/Polo35/CVE-2020-0022 | 2021-03-21 | |
| https://github.com/themmokhtar/CVE-2020-0022 | 2023-11-21 | |
| https://github.com/lsw29475/CVE-2020-0022 | 2021-02-24 | |
| http://packetstormsecurity.com/files/156891/Android-Bluetooth-Remote-Denial-Of-Service.html | 2024-08-04 |
| URL | Date | SRC |
|---|---|---|
| https://source.android.com/security/bulletin/2020-02-01 | 2024-02-02 |
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Huawei Search vendor "Huawei" | Mate 20 Firmware Search vendor "Huawei" for product "Mate 20 Firmware" | < 10.0.0.195\(c00e74r3p8\) Search vendor "Huawei" for product "Mate 20 Firmware" and version " < 10.0.0.195\(c00e74r3p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Search vendor "Huawei" for product "Mate 20" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 Pro Firmware Search vendor "Huawei" for product "Mate 20 Pro Firmware" | < 10.0.0.196\(c185e7r2p4\) Search vendor "Huawei" for product "Mate 20 Pro Firmware" and version " < 10.0.0.196\(c185e7r2p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 Pro Search vendor "Huawei" for product "Mate 20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 20 X Firmware Search vendor "Huawei" for product "Mate 20 X Firmware" | < 10.0.0.195\(c00e74r2p8\) Search vendor "Huawei" for product "Mate 20 X Firmware" and version " < 10.0.0.195\(c00e74r2p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 20 X Search vendor "Huawei" for product "Mate 20 X" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P Smart Firmware Search vendor "Huawei" for product "P Smart Firmware" | < 9.1.0.193\(c605e6r1p5t8\) Search vendor "Huawei" for product "P Smart Firmware" and version " < 9.1.0.193\(c605e6r1p5t8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P Smart Search vendor "Huawei" for product "P Smart" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P Smart 2019 Firmware Search vendor "Huawei" for product "P Smart 2019 Firmware" | < 10.0.0.180\(c185e3r4p1\) Search vendor "Huawei" for product "P Smart 2019 Firmware" and version " < 10.0.0.180\(c185e3r4p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P Smart 2019 Search vendor "Huawei" for product "P Smart 2019" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P20 Firmware Search vendor "Huawei" for product "P20 Firmware" | < 10.0.0.162\(c00e156r1p4\) Search vendor "Huawei" for product "P20 Firmware" and version " < 10.0.0.162\(c00e156r1p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P20 Search vendor "Huawei" for product "P20" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P20 Pro Firmware Search vendor "Huawei" for product "P20 Pro Firmware" | < 10.0.0.162\(c00e156r1p4\) Search vendor "Huawei" for product "P20 Pro Firmware" and version " < 10.0.0.162\(c00e156r1p4\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P20 Pro Search vendor "Huawei" for product "P20 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Firmware Search vendor "Huawei" for product "P30 Firmware" | < 10.0.0.190\(c432e22r2p5\) Search vendor "Huawei" for product "P30 Firmware" and version " < 10.0.0.190\(c432e22r2p5\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Search vendor "Huawei" for product "P30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | P30 Pro Firmware Search vendor "Huawei" for product "P30 Pro Firmware" | < 10.0.0.195\(c00e85r2p8\) Search vendor "Huawei" for product "P30 Pro Firmware" and version " < 10.0.0.195\(c00e85r2p8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | P30 Pro Search vendor "Huawei" for product "P30 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Y6 2019 Firmware Search vendor "Huawei" for product "Y6 2019 Firmware" | < 9.1.0.290\(c185e5r4p1\) Search vendor "Huawei" for product "Y6 2019 Firmware" and version " < 9.1.0.290\(c185e5r4p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Y6 2019 Search vendor "Huawei" for product "Y6 2019" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Y6 Pro 2019 Firmware Search vendor "Huawei" for product "Y6 Pro 2019 Firmware" | < 9.1.0.290\(c636e5r3p1\) Search vendor "Huawei" for product "Y6 Pro 2019 Firmware" and version " < 9.1.0.290\(c636e5r3p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Y6 Pro 2019 Search vendor "Huawei" for product "Y6 Pro 2019" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Y9 2019 Firmware Search vendor "Huawei" for product "Y9 2019 Firmware" | < 9.1.0.264\(c185e2r5p1t8\) Search vendor "Huawei" for product "Y9 2019 Firmware" and version " < 9.1.0.264\(c185e2r5p1t8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Y9 2019 Search vendor "Huawei" for product "Y9 2019" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Nova 3 Firmware Search vendor "Huawei" for product "Nova 3 Firmware" | < 9.1.0.338\(c00e333r1p1t8\) Search vendor "Huawei" for product "Nova 3 Firmware" and version " < 9.1.0.338\(c00e333r1p1t8\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Nova 3 Search vendor "Huawei" for product "Nova 3" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Nova Lite 3 Firmware Search vendor "Huawei" for product "Nova Lite 3 Firmware" | < 9.1.0.322\(c635e8r2p2\) Search vendor "Huawei" for product "Nova Lite 3 Firmware" and version " < 9.1.0.322\(c635e8r2p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Nova Lite 3 Search vendor "Huawei" for product "Nova Lite 3" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Honor 8a Firmware Search vendor "Huawei" for product "Honor 8a Firmware" | < 9.1.0.291\(c185e3r4p1\) Search vendor "Huawei" for product "Honor 8a Firmware" and version " < 9.1.0.291\(c185e3r4p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor 8a Search vendor "Huawei" for product "Honor 8a" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Honor 8x Firmware Search vendor "Huawei" for product "Honor 8x Firmware" | < 10.0.0.183\(c185e2r6p1\) Search vendor "Huawei" for product "Honor 8x Firmware" and version " < 10.0.0.183\(c185e2r6p1\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor 8x Search vendor "Huawei" for product "Honor 8x" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Honor View 20 Firmware Search vendor "Huawei" for product "Honor View 20 Firmware" | < 10.0.0.195\(c636e3r4p3\) Search vendor "Huawei" for product "Honor View 20 Firmware" and version " < 10.0.0.195\(c636e3r4p3\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Honor View 20 Search vendor "Huawei" for product "Honor View 20" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 30 Pro Firmware Search vendor "Huawei" for product "Mate 30 Pro Firmware" | < 10.0.0.203\(c00e202r7p2\) Search vendor "Huawei" for product "Mate 30 Pro Firmware" and version " < 10.0.0.203\(c00e202r7p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 30 Pro Search vendor "Huawei" for product "Mate 30 Pro" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 30 Firmware Search vendor "Huawei" for product "Mate 30 Firmware" | < 10.0.0.203\(c00e202r7p2\) Search vendor "Huawei" for product "Mate 30 Firmware" and version " < 10.0.0.203\(c00e202r7p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 30 Search vendor "Huawei" for product "Mate 30" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 30 Pro 5g Firmware Search vendor "Huawei" for product "Mate 30 Pro 5g Firmware" | < 10.0.0.203\(c00e202r7p2\) Search vendor "Huawei" for product "Mate 30 Pro 5g Firmware" and version " < 10.0.0.203\(c00e202r7p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 30 Pro 5g Search vendor "Huawei" for product "Mate 30 Pro 5g" | - | - |
Safe
|
| Huawei Search vendor "Huawei" | Mate 30 5g Firmware Search vendor "Huawei" for product "Mate 30 5g Firmware" | < 10.0.0.203\(c00e202r7p2\) Search vendor "Huawei" for product "Mate 30 5g Firmware" and version " < 10.0.0.203\(c00e202r7p2\)" | - |
Affected
| in | Huawei Search vendor "Huawei" | Mate 30 5g Search vendor "Huawei" for product "Mate 30 5g" | - | - |
Safe
|
| Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 8.0 Search vendor "Google" for product "Android" and version "8.0" | - |
Affected
| ||||||
| Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 8.1 Search vendor "Google" for product "Android" and version "8.1" | - |
Affected
| ||||||
| Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 9.0 Search vendor "Google" for product "Android" and version "9.0" | - |
Affected
| ||||||
| Google Search vendor "Google" | Android Search vendor "Google" for product "Android" | 10.0 Search vendor "Google" for product "Android" and version "10.0" | - |
Affected
| ||||||