CVE-2019-12577: Incorrect Permission Assignment for Critical Resource

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The macOS binary openvpnlauncher.64 is setuid root. This binary creates /tmp/piaupscript.sh when executed...

PT-2019-12869

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpn launcher.64 binary is setuid root and...

PT-2019-12861

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version 0.9.8 beta build 02099 Description A local attacker could overwrite arbitrary files on the system. When the client initiates a connection, it creates an XML file...

PT-2019-12865

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for Linux Description A local, authenticated attacker could exploit this issue to run arbitrary code with elevated privileges. The root runner.64 binary, which is setuid roo...

CVE-2019-12575: Uncontrolled Search Path Element

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The rootrunner.64 binary is setuid root. This binary executes /opt/pia/ruby/64/ruby, which in turn attempts t...

PT-2019-12866

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 for macOS Description A local, authenticated attacker could run arbitrary code with elevated privileges due to a vulnerability in the openvpn launcher binary, which is setui...

PT-2019-12863

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version v82 Description A local attacker could exploit this issue to overwrite arbitrary files, potentially leading to a denial of service condition and data loss. The openvpn launcher...

PT-2019-12864

Name of the Vulnerable Software and Affected Versions London Trust Media Private Internet Access PIA VPN Client version 1.0 Description A vulnerability in the London Trust Media Private Internet Access PIA VPN Client could allow an authenticated, local attacker to run arbitrary code with elevated...

CVE-2019-12576: Untrusted Search Path

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The openvpnlauncher binary is setuid root. This program is called during the connection process and executes...

CVE-2019-12579: Improper Neutralization of Special Elements used in an OS Command

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v82 for Linux and macOS could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA Linux/macOS binary openvpnlauncher.64 binary is setuid root. This binary accepts several...

CVE-2019-12574: Untrusted Search Path

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client v1.0 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The PIA client is vulnerable to a DLL injection vulnerability during the software update process. The...

CVE-2019-12572

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

CVE-2019-12572

A vulnerability in the London Trust Media Private Internet Access PIA VPN Client 1.0.2 build 02363 for Windows could allow an authenticated, local attacker to run arbitrary code with elevated privileges. On startup, the PIA Windows service pia-service.exe loads the OpenSSL library from...

PT-2019-12862

Name of the Vulnerable Software and Affected Versions Private Internet Access PIA VPN Client version 1.0.2 build 02363 Description A vulnerability could allow an authenticated, local attacker to run arbitrary code with elevated privileges. The issue arises from the PIA Windows service loading the...

CVE-2018-10190

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

CVE-2018-10190: Improper Privilege Management

A vulnerability in London Trust Media Private Internet Access PIA VPN Client v77 for Windows could allow an unauthenticated, local attacker to run executable files with elevated privileges. The vulnerability is due to insufficient implementation of access controls. The "Changelog" and "Help"...

PT-2018-9743

Name of the Vulnerable Software and Affected Versions: London Trust Media Private Internet Access PIA VPN Client version v77 Description: A vulnerability in the London Trust Media Private Internet Access PIA VPN Client could allow an unauthenticated, local attacker to run executable files with...