{"id":"ASB-A-179053823","details":"In updateCapabilities of ConnectivityService.java, there is a possible incorrect network state determination due to a logic error in the code. This could lead to biasing of networking tasks to occur on non-VPN networks, which could lead to remote information disclosure, with no additional execution privileges needed. User interaction is not needed for exploitation.","aliases":["A-179053823","CVE-2021-0517"],"modified":"2026-09-18T15:47:37.392928379Z","published":"2021-06-01T00:00:00Z","references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2021-06-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/frameworks/base/+/5b90ebaf4d9edefcd9648b46cd0226f882169476"}],"affected":[{"package":{"name":"platform/frameworks/base","ecosystem":"Android"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"11:0"},{"fixed":"11:2021-06-01"}]}],"versions":["11"],"ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/9d680e7cd3c58da63d7753f2e4dce5683d2fd893","https://android.googlesource.com/platform/frameworks/base/+/1255ddbc76df53c9562a87cd5701d791e0ec55ad","https://android.googlesource.com/platform/frameworks/base/+/be317557fe11d9a27412712556c9203778fab645","https://android.googlesource.com/platform/frameworks/base/+/4a66aedf09ccdf19d302a5cff6dec5ec9da076bf","https://android.googlesource.com/platform/frameworks/base/+/1a05734c87f9e3ce0cbd33ea1f13ee7a27c57f01","https://android.googlesource.com/platform/frameworks/base/+/d2adbfbf40aaf5d533607fe71e93d6ff6cba2ba1","https://android.googlesource.com/platform/frameworks/base/+/f3d35fdeaab97b8f2646fbcadcc50413138d369a","https://android.googlesource.com/platform/frameworks/base/+/d10299582ae9965c0ff70b5fceb4ce8ee591734e","https://android.googlesource.com/platform/frameworks/base/+/7c4ae16b94ce8f36e4e047ac4c825794d1c21db2","https://android.googlesource.com/platform/frameworks/base/+/334a66342c799018f25c015c54a2c2c017e1ec36","https://android.googlesource.com/platform/frameworks/base/+/cb2feba0fbc5f9a80e3c5cc863ecd56b26113e39","https://android.googlesource.com/platform/frameworks/base/+/9687fd7c3bcb563d8bd3b53874f6e35876275dda"],"severity":"High","spl":"2021-06-01","types":["ID"],"vanir_signatures":[{"signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f3d35fdeaab97b8f2646fbcadcc50413138d369a","target":{"file":"tests/net/integration/util/com/android/server/NetworkAgentWrapper.java"},"deprecated":false,"digest":{"threshold":0.9,"line_hashes":["1507347477625288206924147384212062311","167688605867282803177728729677168565494","137122953859527318281001713726447669367","18219262625178533219379706478832290769","130737000761195551633978398735643043315","258202711614118339221988124104917980448","282747096984891809597603264365114496715","90655393699161537400335180027105381933","175242587158792847800811199501507512010"]},"id":"ASB-A-179053823-2c6d2528","signature_type":"Line"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/9d680e7cd3c58da63d7753f2e4dce5683d2fd893","target":{"file":"services/core/java/com/android/server/ConnectivityService.java"},"deprecated":false,"digest":{"line_hashes":["130685122290000269070185916806103745772","10330500819088495888833910037773966921","184632244487065695388626587647657404593","258382400710289303571064109129317024935","97767333076461204489629404154209508822","27051001654010681673116087546152186240","4279791367659397505693756116762427839","164868897662531412708543463541585522507","264847955601993648350212795163248573560","155016246756462894656171077109222831908","293821000695020235782908004134707957641","30688429203509602610690175745648332808","260377386838969607211462570123745388094","28780719410803030128354082911063688607","328787977812036799257746573734734842462","132990505161844785431176339823274973549","109015711842139512682109670783874066820","90904430466385290694059485275121690615","180976549560987988347727975604466392926"],"threshold":0.9},"id":"ASB-A-179053823-412eb382","signature_type":"Line","signature_version":"v1"},{"source":"https://android.googlesource.com/platform/frameworks/base/+/7c4ae16b94ce8f36e4e047ac4c825794d1c21db2","target":{"file":"services/core/java/com/android/server/connectivity/Vpn.java"},"deprecated":false,"digest":{"line_hashes":["82430332723054704973814326013453390247","154252307144114275208524740098786919116","85776445773038469964823270029051538900","241287416356538605801110510077084948855"],"threshold":0.9},"id":"ASB-A-179053823-510727af","signature_type":"Line","signature_version":"v1"},{"target":{"file":"services/core/java/com/android/server/ConnectivityService.java","function":"updateCapabilities"},"deprecated":false,"digest":{"function_hash":"162341957182682762582143686583421943566","length":1510},"id":"ASB-A-179053823-d2d365d4","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/9d680e7cd3c58da63d7753f2e4dce5683d2fd893"},{"deprecated":false,"digest":{"length":1024,"function_hash":"156584358442038041910340445517037970033"},"id":"ASB-A-179053823-efb4b64a","signature_type":"Function","signature_version":"v1","source":"https://android.googlesource.com/platform/frameworks/base/+/f3d35fdeaab97b8f2646fbcadcc50413138d369a","target":{"function":"NetworkAgentWrapper","file":"tests/net/integration/util/com/android/server/NetworkAgentWrapper.java"}}]},"database_specific":{"source":"https://storage.googleapis.com/android-osv/ASB-A-179053823.json"}}],"schema_version":"1.9.0"}