CVE-2011-1823

UNKNOWNKnown Exploited

CISA Known Exploited Vulnerability

https://android.googlesource.com/platform/system/vold/+/c51920c82463b240e2be0430849837d6fdc5352e; https://nvd.nist.gov/vuln/detail/CVE-2011-1823

Remediation deadline: September 29, 2022

Description

The vold volume manager daemon in Android kernel trusts messages from a PF_NETLINK socket, which allows an attacker to execute code and gain root privileges. This vulnerability is associated with GingerBreak and Exploit.AndroidOS.Lotoor.

Timeline

Published:September 8th, 2022 12:00 AM

Last modified:September 8th, 2022 12:00 AM

Added to KEV:September 8th, 2022

CVSS Scoring

No CVSS v3 score available

Affected Software

From NVD CPE configuration data

Vendors

Android

Products

Android OS

Weaknesses (CWE)

CWE-189

References & Reports

Advisories, patches, and third-party reports

No references available.

Source: CISA KEV + NVD · Data may lag official sources by up to one minute