CVE-2019-14899 Vulnerability Lets Attackers Sniff or Hijack VPN on *nix based Systems
Channel: Lawrence Systems
Date: 2019-12-06

Amazon Affiliate Store
➡️ https://www.amazon.com/shop/lawrencesystemspcpickup

Gear we used on Kit (affiliate Links)
➡️ https://kit.co/lawrencesystems
Try ITProTV free of charge and get 30% off!
➡️ https://go.itpro.tv/lts

Use OfferCode LTSERVICES to get 5% off your order at
➡️ https://lawrence.video/techsupplydirect

Tesla Referral Program Offer
🚘 https://www.tesla.com/referral/thomas65092

Lawrence Systems Shirts and Swag
👕 https://teespring.com/stores/lawrence-technology-services

Digital Ocean Offer Code
➡️ https://m.do.co/c/85de8d181725

HostiFi UniFi Cloud Hosting Service
➡️ https://hostifi.net/?via=lawrencesystems

Protect you privacy with a VPN from Private Internet Access
➡️ https://www.privateinternetaccess.com/pages/buy-vpn/LRNSYS

Google Fi Service Referral Code
📱https://g.co/fi/r/TA02XR

More Of Our Affiliates that help us out and can get you discounts!
➡️ https://www.lawrencesystems.com/partners-and-affiliates/

Twitter
🐦 https://twitter.com/TomLawrenceTech

Patreon
🔗 https://www.patreon.com/lawrencesystems

Our Forums
🔗 https://forums.lawrencesystems.com/

GitHub
🔗 https://github.com/lawrencesystems/

Discord
🔗 https://discord.gg/ZwTz3Mh

Our Web Site
🔗 https://www.lawrencesystems.com/



OpenVPN, WireGuard, and IKEv2/IPSec VPNs are vulnerable to attacks.

[CVE-2019-14899] Inferring and hijacking VPN-tunneled TCP connections.
https://seclists.org/oss-sec/2019/q4/122

https://seclists.org/oss-sec/2019/q4/123

sysctl.d: switch net.ipv4.conf.all.rp_filter from 1 to 2
https://github.com/systemd/systemd/commit/230450d4e4f1f5fc9fa4295ed9185eea5b6ea16e

https://github.com/systemd/systemd/blob/230450d4e4f1f5fc9fa4295ed9185eea5b6ea16e/NEWS#L73-L80