CVE-2017-13208

CRITICAL

Android 5.1.1-8.1 - Remote Code Execution via DHCP Response Bounds Check Bypass

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-13208. PoCs published by idanshechter.

AI-analyzed exploit summary This repository contains a Python script that scans Android libnetutils.so files for CVE-2017-13208 by checking for the presence of specific hex values indicating dhcp_size validity checks. It uses r2pipe for disassembly analysis.

Description

In receive_packet of libnetutils/packet.c, there is a possible out-of-bounds write due to a missing bounds check on the DHCP response. This could lead to remote code execution as a privileged process with no additional execution privileges needed. User interaction is not needed for exploitation. Product: Android. Versions: 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-67474440.

Exploits (1)

nomisec SCANNER 1 stars
by idanshechter · poc
https://github.com/idanshechter/CVE-2017-13208-Scanner

This repository contains a Python script that scans Android libnetutils.so files for CVE-2017-13208 by checking for the presence of specific hex values indicating dhcp_size validity checks. It uses r2pipe for disassembly analysis.

Classification
Scanner 100%
Attack Type
Info Leak
Complexity
Moderate
Reliability
Reliable
Target: Android libnetutils.so
No auth needed
Prerequisites: Access to the target libnetutils.so file · Python 3.8 · r2pipe
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Patch, Vendor Advisory x_refsource_confirm
https://source.android.com/security/bulletin/2018-01-01
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/102415
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1040106

Scores

CVSS v3 9.8
EPSS 0.0869
EPSS Percentile 94.4%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (8)
google/android 5.1.1
google/android 6.0
google/android 6.0.1
google/android 7.0
google/android 7.1.1
google/android 7.1.2
google/android 8.0
google/android 8.1
Published Jan 12, 2018
Tracked Since Feb 18, 2026