Description (CNA)
A flaw in netfilter could allow a network-connected attacker to infer openvpn connection endpoint information for further use in traditional network attacks.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / kernel | affected kernel 5.14.0-49.el9, kernel 5.15.15-100.fc34, kernel 5.15.15-200.fc35 |
CWE
CWE-200
References
- https://bugzilla.redhat.com/show_bug.cgi?id=2004949
- https://www.oracle.com/security-alerts/cpujul2022.html
- https://citizenlab.ca/2024/07/vulnerabilities-in-vpns-paper-presented-at-the-privacy-enhancing-technologies-symposium-2024/
ADP enrichment
No English description supplied.
No references supplied.
No English description supplied.