Description
In the Android kernel in VPN routing there is a possible information disclosure. This could lead to remote information disclosure by an adjacent network attacker with no additional execution privileges needed. User interaction is not needed for exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Android | Android kernel | — |
References
- https://source.android.com/security/bulletin/pixel/2019-09-01
- [oss-security] 20191204 [CVE-2019-14899] Inferring and hijacking VPN-tunneled TCP connections. mailing-list
- [oss-security] 20191205 Re: [CVE-2019-14899] Inferring and hijacking VPN-tunneled TCP connections. mailing-list
- [oss-security] 20191208 Re: [CVE-2019-14899] Inferring and hijacking VPN-tunneled TCP connections. mailing-list