Yair Amit and Adi Sharabani, security experts at the Israeli security firm Skycure have demonstrated at the RSA Conference 2015 the exploitation of a vulnerability that can force any Apple iPhone or iPad into a perpetual reboot loop.
The experts explained that the flaw is an SSL certificate parsing vulnerability affecting iOS 8.0 and fortunately, the IT giant is already working on a fix.
The experts discovered the SSL certificate parsing vulnerability while they were investigating o other security issues. During a test session, they installed a new router by configuring it with specific settings, surprisingly, experts noticed that the devices in the laboratory begin to crash.
After developing a script to exploit the bug over a network interface, researchers found they could repeatedly crash apps.
“Under certain conditions, we managed to get devices into a repeatable reboot cycle, rendering them useless,” Amit wrote in a blog post. “Even if victims understand that the attack comes from a Wi-Fi network, they can’t disable the Wi-Fi interface in the repeated restart state as shown in the video.”
The experts highlighted that the vulnerability needs another WiFi vulnerability to work, but once exploited an attacker could create an areas where any Apple device running the flawed iOS could repeatedly crash, so called “no iOS zones.”
In 2013, the experts have developed a technique to force external devices to connect to their malicious network automatically, they dubbed it WiFiGate. Now they explained that by combining WiFiGate with the new flaw that could create a “no iOS zone”.
“In 2013, we disclosed another vulnerability, which we called WiFiGate. In a nutshell, the impact was that an attacker could create their own network, and force external devices to automatically connect to it. Combining techniques such as WiFiGate or Karma attacks with this new discovery can allow an attacker to form a “No iOS Zone”. ” states the report.
“Basically, by generating a specially crafted SSL certificate, attackers can regenerate a bug and cause apps that perform SSL communication to crash at will,” Amit said.
The researchers have reported the SSL certificate parsing vulnerability to Apple that hasn’t contacted them, for this reason Skycure made public its disclosure.
At this moment, there is no information regarding a release date for a fix by Apple that could solve the SSL certificate parsing vulnerability.
(Security Affairs – SSL certificate parsing vulnerability, data breach, Deep Web)
Necessary cookies are absolutely essential for the website to function properly. This category only includes cookies that ensures basic functionalities and security features of the website. These cookies do not store any personal information.
Any cookies that may not be particularly necessary for the website to function and is used specifically to collect user personal data via analytics, ads, other embedded contents are termed as non-necessary cookies. It is mandatory to procure user consent prior to running these cookies on your website.