| Vulnerability Name: | CVE-2011-1823 (CCN-67977) | ||||||||
| Assigned: | 2011-04-21 | ||||||||
| Published: | 2011-04-21 | ||||||||
| Updated: | 2017-08-17 | ||||||||
| Summary: | The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak. | ||||||||
| CVSS v3 Severity: | 9.3 Critical (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H)
| ||||||||
| CVSS v2 Severity: | 7.2 High (CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C) 5.3 Medium (Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
5.3 Medium (CCN Temporal CVSS v2 Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C/E:U/RL:OF/RC:C)
| ||||||||
| Vulnerability Type: | CWE-189 | ||||||||
| Vulnerability Consequences: | Gain Privileges | ||||||||
| References: | Source: CONFIRM Type: Patch http://android.git.kernel.org/?p=platform/system/core.git;a=commit;h=b620a0b1c7ae486e979826200e8e441605b0a5d6 Source: CONFIRM Type: Patch http://android.git.kernel.org/?p=platform/system/netd.git;a=commit;h=79b579c92afc08ab12c0a5788d61f2dd2934836f Source: CONFIRM Type: UNKNOWN http://android.git.kernel.org/?p=platform/system/vold.git;a=commit;h=c51920c82463b240e2be0430849837d6fdc5352e Source: MISC Type: UNKNOWN http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/ Source: CCN Type: C skills Web site yummy yummy, GingerBreak! Source: MISC Type: Exploit http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html Source: MITRE Type: CNA CVE-2011-1823 Source: MISC Type: Exploit http://forum.xda-developers.com/showthread.php?t=1044765 Source: MISC Type: UNKNOWN http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/ Source: CCN Type: Open Handset Alliance Web site Android Source: CCN Type: OSVDB ID: 74347 Android vold Volume Manager Daemon DirectVolume::handlePartitionAdded Method Negative Index Local Privilege Escalation Source: MISC Type: Exploit http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/ Source: XF Type: UNKNOWN android-vold-priv-escalation(67977) Source: XF Type: UNKNOWN android-vold-priv-escalation(67977) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||