CVE-2019-14899

HIGH

FreeBSD - TCP Stream Injection via VPN Tunnel

Title source: llm
STIX 2.1

Description

A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel.

References (15)

Core 15
Core References
Issue Tracking, Third Party Advisory x_refsource_confirm
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14899
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211288
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211290
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211289
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Jul/25
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Jul/24
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Jul/23
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/08/13/2
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211850
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2020/10/07/3
Third Party Advisory x_refsource_confirm
https://support.apple.com/kb/HT211931
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Nov/20
Mailing List, Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2020/Dec/32
Mailing List, Third Party Advisory mailing-list x_refsource_mlist
http://www.openwall.com/lists/oss-security/2021/07/05/1

Scores

CVSS v3 7.4
EPSS 0.0005
EPSS Percentile 16.3%
Attack Vector ADJACENT_NETWORK
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-300
Status published
Products (8)
apple/ipados < 13.6
apple/iphone_os < 13.6
apple/mac_os_x < 10.15.6
apple/macos 11.0
apple/tvos < 13.4.8
freebsd/freebsd
linux/linux_kernel
openbsd/openbsd
Published Dec 11, 2019
Tracked Since Feb 18, 2026