Oval Definition:	oval:com.ubuntu.bionic:def:2019148990000000
Revision Date: 2019-12-11 Version: 1 Title: CVE-2019-14899 on Ubuntu 18.04 LTS (bionic) - low. Description: A vulnerability was discovered in Linux, FreeBSD, OpenBSD, MacOS, iOS, and Android that allows a malicious access point, or an adjacent user, to determine if a connected user is using a VPN, make positive inferences about the websites they are visiting, and determine the correct sequence and acknowledgement numbers in use, allowing the bad actor to inject data into the TCP stream. This provides everything that is needed for an attacker to hijack active connections inside the VPN tunnel. Family: unix Class: vulnerability Status: Reference(s): CVE-2019-14899 Platform(s): Ubuntu 18.04 LTS Product(s): Definition Synopsis Ubuntu 18.04 LTS (bionic) is installed. AND Package Information linux package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-aws package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-aws-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-azure package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-azure-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-gcp package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-gcp-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-gke-4.15 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-gke-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-gke-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-hwe package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-kvm package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-aws package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-aws-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-azure package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-azure-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-gcp package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-gcp-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-gke-4.15 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-gke-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-gke-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-meta-hwe package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-kvm package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-oem package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-oem-osp1 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-oracle package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-oracle-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-oracle-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-meta-raspi2 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-meta-raspi2-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-meta-snapdragon package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-oem package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-oem-osp1 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-oracle package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-oracle-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-oracle-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-raspi2 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-raspi2-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-signed package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-azure package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-azure-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-gcp package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-gcp-5.3 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-gke-4.15 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-gke-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-gke-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-signed-hwe package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-oem package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-oem-osp1 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-oracle package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-oracle-5.0 package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13'). OR linux-signed-oracle-5.3 package in bionic is affected, but a decision has been made to defer addressing it. OR linux-snapdragon package in bionic is affected, but a decision has been made to defer addressing it (note: '2019-12-13').
BACK