# Novel attack against virtually all VPN apps neuters their entire purpose

**URL:** https://discuss.privacyguides.net/t/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/18192
**Category:** General
**Tags:** article
**Created:** 2024-05-07T06:51:49Z
**Posts:** 3

## Post 1 by @betelgeuse — 2024-05-07T06:51:49Z

> **[Novel attack against virtually all VPN apps neuters their entire purpose](https://arstechnica.com/security/2024/05/novel-attack-against-virtually-all-vpn-apps-neuters-their-entire-purpose/?comments=1&comments-page=1)**
>
> TunnelVision vulnerability has existed since 2002 and may already be known to attackers.

---

## Post 2 by @anon29374801 — 2024-05-07T15:11:51Z

Mullvad had a good blog post regarding this

> **[Evaluating the impact of TunnelVision | Mullvad VPN](https://mullvad.net/en/blog/evaluating-the-impact-of-tunnelvision)**
>
> We evaluated the impact of the latest TunnelVision attack (CVE-2024-3661) and have found it to be very similar to TunnelCrack LocalNet (CVE-2023-36672 and CVE-2023-35838).

AirVPN also had some good info in their response to a forum query about it

> **[TunnelVision vulnerability. Any best practice staff can suggest?](https://airvpn.org/forums/topic/59226-tunnelvision-vulnerability-any-best-practice-staff-can-suggest/)**
>
> https://www.leviathansecurity.com/blog/tunnelvision Apparently this affects both OpenVPN and WireGuard protocols. Technically its not a vulnerability but it was easier for the title...

Seems like, even if a malicious actor does setup an evil DHCP server on your network, as long as your using the network lock features of the recommended VPNs you should be pretty well protected from this as the firewall rules would make it much harder for this to work, assuming no split tunneling.

---

## Post 3 by @user1 — 2024-05-07T15:20:08Z

duplicate of [TunnelVision - How Attackers Can Decloak Routing-Based VPNs For a Total VPN Leak - #7 by LukewarmNinja](https://discuss.privacyguides.net/t/tunnelvision-how-attackers-can-decloak-routing-based-vpns-for-a-total-vpn-leak/18188/7)

---

## Post 4 by @jonah — 2024-06-02T12:01:19Z