SecuritySpace - CVE-2022-20572

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2022-20572

Description: In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel

Test IDs: 1.3.6.1.4.1.25623.1.1.2.2023.1347 1.3.6.1.4.1.25623.1.1.2.2023.1486 1.3.6.1.4.1.25623.1.1.2.2023.2181

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2022-20572
https://source.android.com/security/bulletin/pixel/2022-12-01
https://source.android.com/security/bulletin/pixel/2022-12-01

CVE ID:	CVE-2022-20572
Description:	In verity_target of dm-verity-target.c, there is a possible way to modify read-only files due to a missing permission check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android kernelAndroid ID: A-234475629References: Upstream kernel
Test IDs:	1.3.6.1.4.1.25623.1.1.2.2023.1347 1.3.6.1.4.1.25623.1.1.2.2023.1486 1.3.6.1.4.1.25623.1.1.2.2023.2181
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2022-20572 https://source.android.com/security/bulletin/pixel/2022-12-01 https://source.android.com/security/bulletin/pixel/2022-12-01