Is it really secure to connect to a (well-secured) VPN server over an unencrypted WLAN connection (or maybe a hotel Ethernet)?
I know, that there have been questions like this - but
- I'm not asking if people can read/fake the encrypted contents of the VPN connection.
- I'm not asking if the traffic of all my applications will be routed through the VPN.
What I'm worried about are more low level attacks. Is it reasonable to assume (and these are really just a wild guesses) for example,
- that a fake WLAN access point could send specially crafted WLAN packages that would result e.g. in a buffer overflow on my WLAN adapter, which could be used to break into my system?
- that somebody on the same LAN could send low level (ICMP, ARP, ...) packages that could exploit a security vulnerability of the kernel?
Additionally, I'm worried about a possible small time window after the insecure WLAN is established, but before VPN is up and running.
Things like these...