Description
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Nordvpn | NordVPN | 6.19.6 | — |
References
- ExploitDB-46343 exploit
- Official Product Homepage product
- Product Reference product
- VulnCheck Advisory: NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow third-party-advisory