Android's WiFi-Direct is a wireless technology scientific discipline that allows ii devices to constitute a direct, peer-to-peer Wi-Fi connectedness without requiring a wireless router. Smartphones accept been able to back upwardly Wi-Fi Direct for a land now.
According to the advisory, the remotely exploitable denial-of-service vulnerability is affecting a broad discover of Android mobile devices when it scans for WiFi Direct devices. If exploited, the vulnerability would allow an aggressor forcefulness a reboot of a device.
“An aggressor could post a especially crafted 802.11 Probe Response frame causing the Dalvik subsystem to reboot because of an Unhandle Exception on WiFiMonitor class,” advisory states.
The Android WiFi-Direct vulnerability (CVE-2014-0997) affects:
- Nexus v - Android 4.4.4
- Nexus four - Android 4.4.4
- LG D806 - Android 4.2.2
- Samsung SM-T310 - Android 4.2.2
- Motorola RAZR hard disk drive - Android 4.1.2
Wi-Fi Direct plant much similar Bluetooth, only amongst a longer gain as well as to a greater extent than stability. Devices similar printers as well as wireless mouses tin employ Wi-Fi Direct equally a straight connectedness from the computer. Also, if an object has Wi-Fi capabilities, it could also accept Wi-Fi Direct, which could allow y'all to command it amongst your smartphone inwards well-nigh future.
Andres Blanco from the CoreLabs Team reported the vulnerability to Android Security team as well as Google classified its equally depression severity, as well as they are non much interested to unloose whatever land quickly.
