Vulnerabilities > CVE-2011-3918 - Resource Management Errors vulnerability in Google Android

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
google
CWE-399
exploit available
NVD
Published: 2012-10-07
Updated: 2024-11-21

Summary

The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.

Vulnerable Configurations

Part Description Count
OS
Google
34

Common Weakness Enumeration (CWE)

Exploit-Db

descriptionAndroid Zygote - Socket Vulnerability Fork bomb Attack. CVE-2011-3918. Dos exploit for android platform
idEDB-ID:28957
last seen2016-02-03
modified2013-10-14
published2013-10-14
reporterLuca Verderame
sourcehttps://www.exploit-db.com/download/28957/
titleAndroid Zygote - Socket Vulnerability Fork bomb Attack

Packetstorm

data sourcehttps://packetstormsecurity.com/files/download/123599/androidzygote-dos.txt
idPACKETSTORM:123599
last seen2016-12-05
published2013-10-14
reporterLuca Verderame
sourcehttps://packetstormsecurity.com/files/123599/Android-Zygote-Socket-Fork-Bomb.html
titleAndroid Zygote Socket Fork Bomb

Seebug

bulletinFamilyexploit
descriptionNo description provided by source.
idSSV:82501
last seen2017-11-19
modified2014-07-01
published2014-07-01
reporterRoot
sourcehttps://www.seebug.org/vuldb/ssvid-82501
titleAndroid Zygote - Socket Vulnerability Fork bomb Attack

References