CVE-2019-14899

🗓️ 11 Dec 2019 14:45:12Reported by redhatType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 205 Views

A vulnerability in multiple operating systems allows malicious actors to determine VPN usage and inject data into the TCP stream

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Vulnerability in Ubuntu affects IBM Workload Scheduler 9.5	19 Jun 202015:00	–	ibm
Apple	About the security content of tvOS 13.4.8	15 Jul 202000:00	–	apple
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra	15 Jul 202000:00	–	apple
Apple	About the security content of iOS 14.0 and iPadOS 14.0	16 Sep 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6	15 Jul 202000:00	–	apple
Apple	About the security content of macOS Big Sur 11.0.1	12 Nov 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6 - Apple Support	15 Dec 202005:18	–	apple
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra - Apple Support	15 Dec 202006:08	–	apple
Apple	About the security content of tvOS 13.4.8 - Apple Support	15 Dec 202005:58	–	apple
Apple	About the security content of iOS 14.0 and iPadOS 14.0 - Apple Support	15 Dec 202005:43	–	apple

NVD

Node

freebsd freebsdMatch-

linux linux_kernelMatch-

openbsd openbsdMatch-

Node

apple ipadosRange<13.6

apple iphone_osRange<13.6

apple mac_os_xRange<10.15.6

apple macosMatch11.0

apple tvosRange<13.4.8

[
  {
    "product": "VPN",
    "vendor": "Red Hat",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
seclists	www.seclists.org/fulldisclosure/2020/Jul/24
openwall	www.openwall.com/lists/oss-security/2020/10/07/3
seclists	www.seclists.org/fulldisclosure/2020/Jul/23
support	www.support.apple.com/kb/HT211288
seclists	www.seclists.org/fulldisclosure/2020/Nov/20
openwall	www.openwall.com/lists/oss-security/2021/07/05/1
support	www.support.apple.com/kb/HT211850
support	www.support.apple.com/kb/HT211290
openvpn	www.openvpn.net/security-advisory/no-flaws-found-in-openvpn-software/
support	www.support.apple.com/kb/HT211289

21 Nov 2024 04:27Current

7.3High risk

Vulners AI Score7.3

CVSS 24.9

CVSS 3.17.4

CVSS 37.4

EPSS0.00052

CWE-300