NordVPN Denial-of-Service Vulnerability via Email Field Buffer Overflow

A denial-of-service vulnerability has been identified in NordVPN version 6.19.6. This issue allows local attackers to crash the application by entering an excessively long string, specifically 100,000 characters, into the email input field during the login process. The application fails to handle this input properly, leading to a crash.

Impact

Exploitation of this vulnerability causes the NordVPN application to crash, disrupting the user's VPN service.

Reproduction

To reproduce this vulnerability, paste a buffer of 100,000 characters into the email field of the NordVPN login interface. After entering the email, input '1234' in the password field and click the 'Sign In' button. The application will crash upon processing the input.