Android Wi-Fi Direct DoS Hole

Wednesday, January 28, 2015 @ 03:01 PM gHale


Some Android devices can suffer from a Denial of Service (DoS) attack when scanning for WiFi Direct devices, researchers said.

An attacker could send a specially crafted 802.11 Probe Response frame causing the Dalvik subsystem to reboot because of an Unhandle Exception on WiFiMonitor class, said Andres Blanco from the CoreLabs Team.

RELATED STORIES
Android Malware Packaged with HTML5 Apps
Mobile RAT Targets iOS, Android
Domain Names Seized
Trojan Variant Uses Grammar Tool

The Android security team has been aware of the vulnerability since late September.

Vulnerable packages include:
• Nexus 5 – Android 4.4.4
• Nexus 4 – Android 4.4.4
• LG D806 – Android 4.2.2
• Samsung SM-T310 – Android 4.2.2
• Motorola RAZR HD – Android 4.1.2.

While this is one list, other devices could also suffer from the issue.

Non-vulnerable packages include Android 5.0.1 and 5.0.2. Click here for more information.



Leave a Reply

You must be logged in to post a comment.