Vulnerability in multiple operating systems allowing inference and hijacking of VPN-tunneled TCP connections by determining VPN usage, inferring visited websites, and injecting data into TCP stream. Vulnerable to OpenVPN, WireGuard, IKEv2/IPSec but not thoroughly tested against tor. Inferences made despite encrypted victim responses.
Source | Link |
---|---|
lwn | www.lwn.net/Articles/806546 |
openwall | www.openwall.com/lists/oss-security/2019/12/05/3 |
Transform Your Security Services
Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.
Book a live demo