exploit the possibilities
Home Files News &[SERVICES_TAB]About Contact Add New

Android NFC Denial Of Service

Android NFC Denial Of Service
Posted Jul 9, 2014
Site nipc.org.cn

Android NFC suffers from a denial of service vulnerability. Android OS version prior to 4.4 are affected.

tags | advisory, denial of service
SHA-256 | 8156f109a04ce1b49d46a7ec681e832a42459a16d3379f2c9da91a2fa9dc25e9

Android NFC Denial Of Service

Change Mirror Download
Android NFC Service Denial of Service

------------------------------------------------------------------
I. Summary

NFC Service is a process of Android OS for providing access to NFC functionality, allowing

applications to read NDEF message in NFC tags. A flaw has beend found in NFC Service implementation in

Android OS before 4.4. When a bluetooth pair tag written with a crafted message is touched by a phone

with Android OS before 4.4, it will cause a denial of service of NFC service.

------------------------------------------------------------------
II. Description

According to the NFC Bluetooth Simple Pairing Message Specification(NFC Forum), construct a message

with its field "Length of Local Name" set to 0b0000 0000 or 0b1XXX XXXX(X means any binary value).

Then write the crafted messages to NFC tag. Touch the NFC tag with a smart phone with Android OS

before 4.4, NFC Service will crash. The reason for this is that NFC Stack don't parse zero length or

negative length correctly (com.android.nfc.handover.HandoverManager.parseBtOob/
com.android.nfc.handover.HandoverManager.parse). Here are two crafted messages.
Eg.1 zero value
DA 20 1C 01 61 70 70 6C 69 63 61 74 69 6F 6E 2F
76 6E 64 2E 62 6C 75 65 74 6F 6F 74 68 2E 65 70
2E 6F 6F 62 30 1C 00 5C 5C 5C 5C 5C 5C [00] 09 41
6E 64 72 6F 69 64 04 0D 0C 02 40 05 03 1E 11 0B 11
Eg.2 negative value
DA 20 1C 01 61 70 70 6C 69 63 61 74 69 6F 6E 2F
76 6E 64 2E 62 6C 75 65 74 6F 6F 74 68 2E 65 70
2E 6F 6F 62 30 1C 00 5C 5C 5C 5C 5C 5C [80] 09 41
6E 64 72 6F 69 64 04 0D 0C 02 40 05 03 1E 11 0B 11

------------------------------------------------------------------
III. Impact

This bug cause a DoS of NFC service and NFC function returns to normal until NFC Service reboot

automatically .

------------------------------------------------------------------
IV. Affected

Android OS before 4.4. Other customized OS based on Android may also be affected due to this bug, such

as MIUI before 5.30.

------------------------------------------------------------------
V. Solution

modify the source codes about Bluetooth pairing message parsing.
Login or Register to add favorites

File Archive:

March 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Mar 1st
    16 Files
  • 2
    Mar 2nd
    0 Files
  • 3
    Mar 3rd
    0 Files
  • 4
    Mar 4th
    32 Files
  • 5
    Mar 5th
    28 Files
  • 6
    Mar 6th
    42 Files
  • 7
    Mar 7th
    17 Files
  • 8
    Mar 8th
    13 Files
  • 9
    Mar 9th
    0 Files
  • 10
    Mar 10th
    0 Files
  • 11
    Mar 11th
    15 Files
  • 12
    Mar 12th
    19 Files
  • 13
    Mar 13th
    21 Files
  • 14
    Mar 14th
    38 Files
  • 15
    Mar 15th
    15 Files
  • 16
    Mar 16th
    0 Files
  • 17
    Mar 17th
    0 Files
  • 18
    Mar 18th
    10 Files
  • 19
    Mar 19th
    32 Files
  • 20
    Mar 20th
    46 Files
  • 21
    Mar 21st
    16 Files
  • 22
    Mar 22nd
    13 Files
  • 23
    Mar 23rd
    0 Files
  • 24
    Mar 24th
    0 Files
  • 25
    Mar 25th
    12 Files
  • 26
    Mar 26th
    31 Files
  • 27
    Mar 27th
    19 Files
  • 28
    Mar 28th
    42 Files
  • 29
    Mar 29th
    0 Files
  • 30
    Mar 30th
    0 Files
  • 31
    Mar 31st
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close