CVE-2011-1823

Published: Jun 9, 2011Modified: Apr 21, 2026CISA KEV

7.8

Vector

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.8 / Impact: 5.9

Source: NVD

Description

The vold volume manager daemon on Android 3.0 and 2.x before 2.3.4 trusts messages that are received from a PF_NETLINK socket, which allows local users to execute arbitrary code and gain root privileges via a negative index that bypasses a maximum-only signed integer check in the DirectVolume::handlePartitionAdded method, which triggers memory corruption, as demonstrated by Gingerbreak.

Affected (2)

Products: Google: Android

1 product

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Google Android	From 2.0 to 2.3.4
Google Android	Version 3.0

Related CWEs

Integer Overflow or Wraparound

The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (19)

http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6

Source: cve@mitre.org

Broken Link

http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f

Source: cve@mitre.org

Broken Link

http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e

Source: cve@mitre.org

Broken Link

http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/

Source: cve@mitre.org

Broken Link

http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html

Source: cve@mitre.org

ExploitIssue Tracking

http://forum.xda-developers.com/showthread.php?t=1044765

Source: cve@mitre.org

ExploitIssue Tracking

http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/

Source: cve@mitre.org

Press/Media Coverage

http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/67977

Source: cve@mitre.org

Third Party AdvisoryVDB Entry

http://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=b620a0b1c7ae486e979826200e8e441605b0a5d6

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://android.git.kernel.org/?p=platform/system/netd.git%3Ba=commit%3Bh=79b579c92afc08ab12c0a5788d61f2dd2934836f

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://android.git.kernel.org/?p=platform/system/vold.git%3Ba=commit%3Bh=c51920c82463b240e2be0430849837d6fdc5352e

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://androidcommunity.com/gingerbreak-root-for-gingerbread-app-20110421/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

http://c-skills.blogspot.com/2011/04/yummy-yummy-gingerbreak.html

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

http://forum.xda-developers.com/showthread.php?t=1044765

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitIssue Tracking

http://www.androidpolice.com/2011/05/03/google-patches-gingerbreak-exploit-but-dont-worry-we-still-have-root-for-now/

Source: af854a3a-2127-422b-91ae-364da2661108

Press/Media Coverage

http://xorl.wordpress.com/2011/04/28/android-vold-mpartminors-signedness-issue/

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/67977

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2011-1823

Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0

US Government Resource

Timeline

No history available yet.