CVE-2020-0173: 
NixOS vulnerability analysis and mitigation

CVE-2020-0173 is a vulnerability discovered in Android 10's Parse_lins function of eas_mdls.c. The vulnerability was disclosed in June 2020 and affects Android version 10. The issue stems from improper input validation that could potentially lead to resource exhaustion (NVD, CVE).

The vulnerability has been assigned a CVSS v3.1 base score of 6.5 (MEDIUM) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H. The vulnerability is classified under CWE-20 (Improper Input Validation) and CWE-400 (Uncontrolled Resource Consumption). The issue specifically occurs in the Parse_lins function of the eas_mdls.c file (NVD).

The vulnerability can lead to remote denial of service when successfully exploited. The attack requires no additional execution privileges but does require user interaction for successful exploitation (NVD).

The vulnerability requires network access and user interaction for successful exploitation. While the attack complexity is considered low, the requirement for user interaction provides some mitigation against automated attacks (NVD).

The vulnerability was addressed in Android's June 2020 security patch. Users are advised to update their Android devices to the latest available security patch level to protect against this vulnerability (Android Bulletin).