PT-2015-3523 · Google · Android

Published 2015-04-01 · Updated 2024-06-15 · CVE-2012-2808

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 4.1.1

Description The issue concerns the PRNG implementation in the DNS resolver in Bionic, which incorrectly utilizes time and PID information to generate random numbers for query ID values and UDP source ports. This makes it easier for remote attackers to spoof DNS responses by guessing these numbers.

Recommendations For Android versions prior to 4.1.1, update to version 4.1.1 or later to resolve the issue.

Exploit

Fix

Related Identifiers

CVE-2012-2808

OPENSUSE-SU-2024:10071-1

Affected Products

Android

References · 903

• 🔥 http://blog.watchfire.com/files/androiddnsweakprng.pdf · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:10071-1 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2012-2808 · Security Note
• https://suse.com/security/cve/CVE-2015-7191 · Note
• https://suse.com/security/cve/CVE-2015-7208 · Note
• https://suse.com/security/cve/CVE-2012-4217 · Note
• https://suse.com/security/cve/CVE-2014-1494 · Note
• https://suse.com/security/cve/CVE-2015-7179 · Note
• https://suse.com/security/cve/CVE-2012-0473 · Note
• https://suse.com/security/cve/CVE-2012-1937 · Note
• https://suse.com/security/cve/CVE-2014-8643 · Note
• https://suse.com/security/cve/CVE-2010-0165 · Note
• https://suse.com/security/cve/CVE-2012-3963 · Note
• https://suse.com/security/cve/CVE-2009-1307 · Note
• https://suse.com/security/cve/CVE-2012-3982 · Note