CVE-2011-1823: Android OS Privilege Escalation Vulnerability
First published: Thu Jun 09 2011(Updated: )
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Android Operating System | ||
| Android | >=2.0<2.3.4 | |
| Android | =3.0 | |
| Android | =2.1 | |
| Android | =2.2 | |
| Android | =2.2-rev1 | |
| Android | =2.2.1 | |
| Android | =2.2.2 | |
| Android | =2.2.3 | |
| Android | =2.3-rev1 | |
| Android | =2.3.1 | |
| Android | =2.3.2 | |
| Android | =2.3.3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://android.git.kernel.org/?p=platform/system/core.git;a=commit;h=b620a0b1c7ae486e979826200e8e441605b0a5d6
- http://android.git.kernel.org/?p=platform/system/netd.git;a=commit;h=79b579c92afc08ab12c0a5788d61f2dd2934836f
- http://android.git.kernel.org/?p=platform/system/vold.git;a=commit;h=c51920c82463b240e2be0430849837d6fdc5352e
- http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/
- http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html
- http://forum.xda-developers.com/showthread.php?t=1044765
- http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/
- http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67977
- http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6
- http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f
- http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e
- https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e;
- https://nvd.nist.gov/vuln/detail/CVE-2011-1823
Frequently Asked Questions
What is the severity of CVE-2011-1823?
CVE-2011-1823 is classified as a critical vulnerability because it allows local users to execute arbitrary code and gain root privileges.
How do I fix CVE-2011-1823?
To fix CVE-2011-1823, upgrade to Android version 2.3.4 or later, or a newer version that is not affected.
Which versions of Android are affected by CVE-2011-1823?
CVE-2011-1823 affects Android versions 2.1 through 3.0, specifically all versions before 2.3.4.
What type of attack can be executed via CVE-2011-1823?
CVE-2011-1823 allows a local user to perform a local privilege escalation attack by manipulating the vold volume manager.
Who can exploit CVE-2011-1823?
CVE-2011-1823 can be exploited by any local user with the capability to send messages to the PF_NETLINK socket.
- agent/type
- agent/remedy
- agent/description
- agent/title
- agent/weakness
- agent/severity
- agent/first-publish-date
- agent/references
- agent/author
- agent/softwarecombine
- agent/event
- agent/trending
- agent/source
- agent/tags
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-api
- source/NVD
- collector/nvd-cve
- collector/nvd-index
- collector/nvd-historical
- vendor/android
- canonical/android operating system
- vendor/google
- canonical/android
- version/android/2.0
- version/android/3.0
- version/android/2.1
- version/android/2.2
- version/android/2.2-rev1
- version/android/2.2.1
- version/android/2.2.2
- version/android/2.2.3
- version/android/2.3-rev1
- version/android/2.3.1
- version/android/2.3.2
- version/android/2.3.3