CVE-2017-15882

Related Files

Android Private Internet Access Denial Of Service

Posted Oct 27, 2017

Authored by Yakov Shafranovich | Site wwws.nightwatchcybersecurity.com

The Android application provided by Private Internet Access (PIA) VPN service can be crashed by downloading a large file containing a list of current VPN servers. This can be exploited by an MITM attacker via intercepting and replacing this file. While the file is digitally signed, it is not served over SSL and the application did not contain logic for checking if the provided file is very large. The vendor has fixed this issue in version 1.3.3.1 and users should install the latest version.

tags | exploit, denial of service

advisories | CVE-2017-15882

SHA-256 | 800f549876739334d620586c15f309262e80b5ce74344d37893a980b9345e1e9

Download | Favorite | View