Lucene search

CVE-2011-1823

🗓️ 09 Jun 2011 10:00:00Reported by mitreType

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages from a PF_NETLINK socket, allowing local users to execute arbitrary code and gain root privileges via a negative index bypassing a maximum-only signed integer check

Reporter	Title	Published	Views	Family All 7
Check Point Advisories	Google Android Vold Volume Manager Integer Wrap Root Exploit Privilege Escalation - Ver2 (CVE-2011-1823)	16 Apr 201400:00	–	checkpoint_advisories
NVD	CVE-2011-1823	9 Jun 201110:36	–	nvd
Prion	Design/Logic Flaw	9 Jun 201110:36	–	prion
android	Gingerbreak	21 Apr 201100:00	–	android
CVE	CVE-2011-1823	9 Jun 201110:36	–	cve
CISA KEV Catalog	Android OS Privilege Escalation Vulnerability	8 Sep 202200:00	–	cisa_kev
AttackerKB	CVE-2011-1823	9 Jun 201100:00	–	attackerkb

Source	Link
android	www.android.git.kernel.org/
android	www.android.git.kernel.org/
c-skills	www.c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html
androidcommunity	www.androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/
androidpolice	www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/67977
xorl	www.xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/
forum	www.forum.xda-developers.com/showthread.php
android	www.android.git.kernel.org/

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

09 Jun 2011 10:00Current

7.2High risk

Vulners AI Score7.2

EPSS0.005