High severity7.8NVD Advisory· Published Dec 20, 2017· Updated Jun 17, 2026
CVE-2017-17809
CVE-2017-17809
Description
In Golden Frog VyprVPN before 2.15.0.5828 for macOS, the vyprvpnservice launch daemon has an unprotected XPC service that allows attackers to update the underlying OpenVPN configuration and the arguments passed to the OpenVPN binary when executed. An attacker can abuse this vulnerability by forcing the VyprVPN application to load a malicious dynamic library every time a new connection is made.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:goldenfrog:vyprvpn:*:*:*:*:*:macos:*:*+ 1 more
- cpe:2.3:a:goldenfrog:vyprvpn:*:*:*:*:*:macos:*:*range: <2.15.0.5828
- (no CPE)range: <2.15.0.5828
Patches
Vulnerability mechanics
References
1- github.com/VerSprite/research/blob/master/advisories/VS-2017-007.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.