{"id":"ASB-A-168500792", "published":"2020-12-01T00:00:00Z", "modified":"2026-07-08T15:24:28.874761715Z", "aliases":["CVE-2020-0467", "A-168500792"], "details":"In onUserStopped of Vpn.java, there is a possible resetting of user preferences due to a logic issue. This could lead to local information disclosure of secure network traffic over a non-VPN link with no additional execution privileges needed. User interaction is not needed for exploitation.", "affected":[{"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"8.1:0"}, {"fixed":"8.1:2020-12-01"}]}], "versions":["8.1"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9"], "severity":"High", "spl":"2020-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["331164130220073483159077166472416681445", "272971140574235435846252158985016909898", "179585735392734205954198078228623916196", "275502726631547484265657262251379747930"], "threshold":0.9}, "id":"ASB-A-168500792-ad209f09", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9", "target":{"file":"services/core/java/com/android/server/connectivity/Vpn.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"9:0"}, {"fixed":"9:2020-12-01"}]}], "versions":["9"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9"], "severity":"High", "spl":"2020-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["331164130220073483159077166472416681445", "272971140574235435846252158985016909898", "179585735392734205954198078228623916196", "275502726631547484265657262251379747930"], "threshold":0.9}, "id":"ASB-A-168500792-49381c17", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9", "target":{"file":"services/core/java/com/android/server/connectivity/Vpn.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"10:0"}, {"fixed":"10:2020-12-01"}]}], "versions":["10"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9"], "severity":"High", "spl":"2020-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["331164130220073483159077166472416681445", "272971140574235435846252158985016909898", "179585735392734205954198078228623916196", "275502726631547484265657262251379747930"], "threshold":0.9}, "id":"ASB-A-168500792-77f687ea", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9", "target":{"file":"services/core/java/com/android/server/connectivity/Vpn.java"}}]}}, {"package":{"name":"platform/frameworks/base", "ecosystem":"Android"}, "ranges":[{"type":"ECOSYSTEM", "events":[{"introduced":"11:0"}, {"fixed":"11:2020-12-01"}]}], "versions":["11"], "ecosystem_specific":{"fixes":["https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9"], "severity":"High", "spl":"2020-12-01", "types":["ID"], "vanir_signatures":[{"deprecated":false, "digest":{"line_hashes":["331164130220073483159077166472416681445", "272971140574235435846252158985016909898", "179585735392734205954198078228623916196", "275502726631547484265657262251379747930"], "threshold":0.9}, "id":"ASB-A-168500792-c0ed34b8", "signature_type":"Line", "signature_version":"v1", "source":"https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9", "target":{"file":"services/core/java/com/android/server/connectivity/Vpn.java"}}]}}], "references":[{"type":"ADVISORY", "url":"https://source.android.com/security/bulletin/2020-12-01"}, {"type":"FIX", "url":"https://android.googlesource.com/platform/frameworks/base/+/61b620ad4f773e86c03e0719ae24268babcc62a9"}]}