New Linux Vulnerability Lets Attackers Hijack VPN Connections

[erek]

Pretty severe !!!

"Security researchers found a new vulnerability allowing potential attackers to hijack VPN connections on affected *NIX devices and inject arbitrary data payloads into IPv4 and IPv6 TCP streams.

They disclosed the security flaw tracked as CVE-2019-14899 to distros and the Linux kernel security team, as well as to others impacted such as Systemd, Google, Apple, OpenVPN, and WireGuard.

The vulnerability is known to impact most Linux distributions and Unix-like operating systems including FreeBSD, OpenBSD, macOS, iOS, and Android."

https://www.bleepingcomputer.com/ne...bility-lets-attackers-hijack-vpn-connections/

 

[Zarathustra[H]]

Yikes.

That's a bad one.

I'm betting it will be patched rather fast though, at least in Linux distributions, and the BSD's. With Apple and Android there is no telling when they would get around to it.

 

[Darth Ender]

Only a problem if you connect to an access point that is controlled by the attacker

Still not good but also, not corroborated