Description
Nord VPN 6.14.31 contains a denial of service vulnerability that allows unauthenticated attackers to crash the application by submitting an excessively long string in the password field. Attackers can paste a buffer of repeated characters into the password input field to trigger an application crash when attempting to authenticate.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nordvpn | NordVPN | ≤ 6.14.31 | — |
References
- ExploitDB-45304 exploit
- Product Reference product
- VulnCheck Advisory: Nord VPN 6.14.31 Denial of Service via Password Field third-party-advisory