Google Android NFC Bluetooth Simple Pairing Message Denial of Service Vulnerability

Bugtraq ID:	68470
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	No
Local:	Yes
Published:	Jul 09 2014 12:00AM
Updated:	Jul 09 2014 12:00AM
Credit:	NIPC
Vulnerable:	Google Android 3.1.4 Google Android 2.3.5 Google Android 2.2.3 Google Android 3.2 Google Android 3.0 Google Android 2.3.4 Google Android 2.3.3 Google Android 2.3.2 Google Android 2.3.1 Google Android 2.3 Rev1 Google Android 2.2.2 Google Android 2.2.1 Google Android 2.2 Rev1 Google Android 2.2 Google Android 2.1 Google Android 1.6 Google Android 1.5
Not Vulnerable:

Google Android NFC Bluetooth Simple Pairing Message Denial of Service Vulnerability

Google Android is prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow attackers to cause denial-of-service conditions.

Versions prior Google Android 4.4 are vulnerable.

Google Android NFC Bluetooth Simple Pairing Message Denial of Service Vulnerability

Attackers require local interactive access to exploit this issue.

Google Android NFC Bluetooth Simple Pairing Message Denial of Service Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android NFC Bluetooth Simple Pairing Message Denial of Service Vulnerability

References:

• Android Homepage (Google)
  
• Android NFC Service Denial of Service (SecLists.Org)