Lucene search
Ubuntu.comUB:CVE-2011-1149HistoryApr 21, 2011 - 12:00 a.m.
CVE-2011-1149
2011-04-2100:00:00
ubuntu.com
ubuntu.com
7
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
61.2%
Android before 2.3 does not properly restrict access to the system property
space, which allows local applications to bypass the application sandbox
and gain privileges, as demonstrated by psneuter and KillingInTheNameOf,
related to the use of Android shared memory (ashmem) and
ASHMEM_SET_PROT_MASK.
Bugs
Notes
| Author | Note |
|---|---|
| jdstrand | android kernels (goldfish, grouper, maguro, mako and manta) are not supported on the Ubuntu Touch 13.10 preview kernels |
Related
nvd
nvd
CVE-2011-1149
2011-04-21 10:55:01
prion
prion
Authentication flaw
2011-04-21 10:55:00
cvelist
cvelist
CVE-2011-1149
2011-04-21 10:00:00
cve
cve
CVE-2011-1149
2011-04-21 10:55:01
android
android
KillingInTheNameOf psneuter ashmem
2011-01-06 00:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
0.002 Low
EPSS
Percentile
61.2%
Related for UB:CVE-2011-1149