CVE-2019-25572: NordVPN 6.19.6 Denial of Service via Email Field Buffer Overflow
NordVPN 6.19.6 contains a denial of service vulnerability that allows local attackers to crash the application by submitting an excessively long string in the email input field. Attackers can paste a buffer of 100,000 characters into the email field during login to trigger an application crash.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-25572?
CVE-2019-25572 is classified as a denial of service vulnerability, which can cause the application to crash.
How do I fix CVE-2019-25572?
To fix CVE-2019-25572, update NordVPN to the latest version beyond 6.19.6 that addresses this vulnerability.
What versions of NordVPN are affected by CVE-2019-25572?
CVE-2019-25572 specifically affects NordVPN version 6.19.6.
Can CVE-2019-25572 be exploited remotely?
No, CVE-2019-25572 requires local access to the application to exploit the vulnerability.
What kind of attack does CVE-2019-25572 facilitate?
CVE-2019-25572 facilitates a denial of service attack through a buffer overflow on the email input field.