CVE-2011-1823: Android OS Privilege Escalation Vulnerability
First published: Thu Jun 09 2011(Updated: )
The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.
Credit: cve@mitre.org cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Google Android | =2.1 | |
| Google Android | =2.2 | |
| Google Android | =2.2-rev1 | |
| Google Android | =2.2.1 | |
| Google Android | =2.2.2 | |
| Google Android | =2.2.3 | |
| Google Android | =2.3-rev1 | |
| Google Android | =2.3.1 | |
| Google Android | =2.3.2 | |
| Google Android | =2.3.3 | |
| Google Android | =3.0 | |
| Google Android | >=2.0<2.3.4 | |
| >=2.0<2.3.4 | ||
| =3.0 | ||
| Android Android OS |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://android.git.kernel.org/?p=platform/system/core.git;a=commit;h=b620a0b1c7ae486e979826200e8e441605b0a5d6
- http://android.git.kernel.org/?p=platform/system/netd.git;a=commit;h=79b579c92afc08ab12c0a5788d61f2dd2934836f
- http://android.git.kernel.org/?p=platform/system/vold.git;a=commit;h=c51920c82463b240e2be0430849837d6fdc5352e
- http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/
- http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html
- http://forum.xda-developers.com/showthread.php?t=1044765
- http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/
- http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/67977
- http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6
- http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f
- http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e
- https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e;
- https://nvd.nist.gov/vuln/detail/CVE-2011-1823
- agent/author
- agent/type
- agent/remedy
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/description
- agent/title
- agent/references
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/weakness
- agent/severity
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/first-publish-date
- agent/event
- agent/tags
- collector/nvd-cve
- exploited/true
- collector/cisa-known-exploited
- source/CISA
- vendor/google
- canonical/google android
- version/google android/2.1
- version/google android/2.2
- version/google android/2.2-rev1
- version/google android/2.2.1
- version/google android/2.2.2
- version/google android/2.2.3
- version/google android/2.3-rev1
- version/google android/2.3.1
- version/google android/2.3.2
- version/google android/2.3.3
- version/google android/3.0
- version/google android/2.0
- vendor/android
- canonical/android android os