BitChat iOS Denial of Service via Unauthenticated MESSAGE Packet

Executive Summary

This vulnerability in BitChat for iOS v1.15.0 allows a remote attacker to send an unauthenticated MESSAGE packet into the mesh gossip cache, causing a denial of service. The flaw stems from weaknesses in the BLE cache mechanism that let unauthorized data persist and propagate through the network without proper validation.

Useful 0 Not Useful 0

Detection Guidance

To detect this vulnerability, use the provided Proof of Concept (PoC) script from Resource 1. Run `python3 barghest.py --scan` to identify vulnerable BitChat 1.15.0 iOS devices on your network. If a device is found, execute `python3 barghest.py --target` to test for cache poisoning susceptibility.

Useful 0 Not Useful 0

Impact Analysis

An attacker could exploit this to disrupt messaging services by injecting spam, spoofed messages, or causing network congestion. The attack may degrade reliable message delivery and allow unauthorized data to spread across the mesh network without further attacker involvement.

Useful 0 Not Useful 0

Mitigation Strategies

Update BitChat to the patched version (1.5.1 or later) to address the authentication bypass and cache poisoning issues. Ensure all iOS devices running BitChat apply the latest security fixes immediately. Disable BLE mesh networking if not required until updates are applied.

Useful 0 Not Useful 0