VPN: an attacker can inject data into the TCP stream which allows a hijack of active connections inside the VPN tunnel
Published Dec 11, 2019
7.4
HIGHCVSS 3.1
EPSS 0.84%
Description
A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel.
Affected products
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
Red Hat statement
This issue did not affect Red Hat Enterprise Linux 5, 6, 7, and 8 as openvpn package is currently not provided in any of our supported products.
Metrics
No CVSS v4.0 score for this CVE.
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CVSS:3.0/AV:A/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
AV:A/AC:M/Au:S/C:P/I:P/A:P
This CVE is not in the KEV list.
No CISA SSVC assessment for this CVE yet.
Estimated probability of exploitation in the wild in the next 30 days (FIRST EPSS). As of Oct 1, 2026.
Score over time
2021–2026- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
- EPSS v4
Percentile over time
- EPSS v1
- EPSS v5
- EPSS v2
- EPSS v3
- EPSS v4
Table of values (16 key points)
Flat stretches are collapsed; showing up to 120 newest points.
| Date | Score | Percentile | Model |
|---|---|---|---|
| Oct 1, 2026 | 0.84% (0.00838) | 56.27th | v5 (v2026.06.15) |
| Jun 15, 2026 | 0.84% (0.00838) | 52.86th | v5 (v2026.06.15) |
| Mar 17, 2025 | 0.20% (0.00197) | 39.63th | v4 (v2025.03.14) |
| Dec 12, 2024 | 0.08% (0.00077) | 34.95th | v3 (v2023.03.01) |
| May 8, 2024 | 0.05% (0.00046) | 16.07th | v3 (v2023.03.01) |
| Mar 7, 2023 | 0.05% (0.00046) | 14.04th | v3 (v2023.03.01) |
| Mar 6, 2023 | 1.55% (0.01547) | 74.98th | v2 (v2022.01.01) |
| Apr 1, 2022 | 1.55% (0.01547) | 72.92th | v2 (v2022.01.01) |
| Feb 4, 2022 | 5.84% (0.05839) | 77.39th | v2 (v2022.01.01) |
| Feb 3, 2022 | 2.31% (0.02310) | 53.71th | v1 |
| Jan 6, 2022 | 2.31% (0.02310) | 53.26th | v1 |
| Jan 5, 2022 | 0.52% (0.00524) | 33.47th | v5 (v2026.06.15) |
| Dec 22, 2021 | 0.52% (0.00524) | 33.18th | v1 |
| Sep 1, 2021 | 2.31% (0.02310) | 78.15th | v1 |
| Jul 6, 2021 | 2.31% (0.02310) | 0.00th | v1 |
| Apr 14, 2021 | 2.17% (0.02167) | 0.00th | v1 |
References (19)
- http://seclists.org/fulldisclosure/2020/Dec/32 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Jul/23 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Jul/24 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Jul/25 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://seclists.org/fulldisclosure/2020/Nov/20 mailing-listx_refsource_FULLDISCMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/08/13/2 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2020/10/07/3 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- http://www.openwall.com/lists/oss-security/2021/07/05/1 mailing-listx_refsource_MLISTMailing ListThird Party Advisory
- https://access.redhat.com/security/cve/CVE-2019-14899 Vendor Advisory
- https://bugzilla.redhat.com/show_bug.cgi?id=1774905 Issue Tracking
- https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2019-14899 x_refsource_CONFIRMIssue TrackingThird Party Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2019-14899
- https://openvpn.net/security-advisory/no-flaws-found-in-openvpn-software/ x_refsource_MISCThird Party Advisory
- https://support.apple.com/kb/HT211288 x_refsource_CONFIRMThird Party Advisory
- https://support.apple.com/kb/HT211289 x_refsource_CONFIRMThird Party Advisory
- https://support.apple.com/kb/HT211290 x_refsource_CONFIRMThird Party Advisory
- https://support.apple.com/kb/HT211850 x_refsource_CONFIRMThird Party Advisory
- https://support.apple.com/kb/HT211931 x_refsource_CONFIRMThird Party Advisory
- https://www.cve.org/CVERecord?id=CVE-2019-14899
Change history (0)
No recorded changes yet.