Lucene search
HistoryOct 07, 2012 - 3:55 p.m.
CVE-2011-3918
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.8%
The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.
Affected configurations
Node
googleandroidRange≤4.0.3
ORgoogleandroidMatch1.0
ORgoogleandroidMatch1.1
ORgoogleandroidMatch1.5
ORgoogleandroidMatch1.6
ORgoogleandroidMatch2.0
ORgoogleandroidMatch2.0.1
ORgoogleandroidMatch2.1
ORgoogleandroidMatch2.2
ORgoogleandroidMatch2.2rev1
ORgoogleandroidMatch2.2.1
ORgoogleandroidMatch2.2.2
ORgoogleandroidMatch2.2.3
ORgoogleandroidMatch2.3
ORgoogleandroidMatch2.3rev1
ORgoogleandroidMatch2.3.1
ORgoogleandroidMatch2.3.2
ORgoogleandroidMatch2.3.3
ORgoogleandroidMatch2.3.4
ORgoogleandroidMatch2.3.5
ORgoogleandroidMatch2.3.6
ORgoogleandroidMatch2.3.7
ORgoogleandroidMatch3.0
ORgoogleandroidMatch3.1
ORgoogleandroidMatch3.2
ORgoogleandroidMatch3.2.1
ORgoogleandroidMatch3.2.2
ORgoogleandroidMatch3.2.4
ORgoogleandroidMatch3.2.6
ORgoogleandroidMatch4.0
ORgoogleandroidMatch4.0.1
ORgoogleandroidMatch4.0.2
Related
packetstorm
packetstorm
Android Zygote Socket Fork Bomb
2013-10-14 00:00:00
seebug
seebug
Android Zygote - Socket Vulnerability Fork bomb Attack
2014-07-01 00:00:00
cve
cve
CVE-2011-3918
2022-10-03 16:15:08
cvelist
cvelist
CVE-2011-3918
2022-10-03 16:15:08
zdt
zdt
Android Zygote Socket Vulnerability Fork bomb Attack
2013-10-14 00:00:00
prion
prion
Code injection
2012-10-07 15:55:00
exploitpack
exploitpack
Android Zygote - Socket and Fork Bomb (Denial of Service)
2013-10-14 00:00:00
exploitdb
exploitdb
Android Zygote - Socket and Fork Bomb (Denial of Service)
2013-10-14 00:00:00
7.8 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:N/I:N/A:C
6.6 Medium
AI Score
Confidence
High
0.001 Low
EPSS
Percentile
33.8%
Related for NVD:CVE-2011-3918