What is CVE-2013-6774?

CVE-2013-6774 is a vulnerability in Androidsu Chainsdd Superuser. Published 2014-03-31.

Is CVE-2013-6774 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Androidsu Chainsdd Superuser

CVE-2013-6774

Untrusted search path vulnerability in the ChainsDD Superuser package 3.1.3 for Android 4.2.x and earlier, CyanogenMod/ClockWorkMod/Koush Superuser package 1.0.2.1 for Android 4.2.x and earlier, and Chainfire SuperSU package before 1.69 for Android 4.2.x and earlier allows attackers to load an arbitrary .jar file and gain privileges via a crafted BOOTCLASSPATH environment variable for a /system/xbin/su process. NOTE: another researcher was unable to reproduce this with ChainsDD Superuser.

EPSS: 0.016 (73.3th percentile) — read the EPSS interpretation.

Affected products

Androidsu Chainsdd_superuser — versions 3.1.3
Chainfire Supersu — versions 1.69
Google Android — versions 1.0, 1.1, 1.5
Koushik_dutta Superuser — versions 1.0.2.1
N/a — versions n/a

Public proof-of-concept exploits

tangsilian/android-vuln

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)

Frequently asked questions

What is CVE-2013-6774?: CVE-2013-6774 is a vulnerability in Androidsu Chainsdd Superuser. Published 2014-03-31.
Is CVE-2013-6774 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.