CVE-2015-2320

概要

参考情報

• mono-project.com/news/2015/03/07/mono-tls-vulnerability · Vendor Advisory
• openwall.com/lists/oss-security/2015/03/17/9 · Mailing List
• securityfocus.com/bid/73256 · Third Party Advisory
• ubuntu.com/usn/USN-2547-1 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• mono/mono commit b371da6 · Third Party Advisory
• debian.org/security/2015/dsa-3202 · Third Party Advisory

mono のその他の脆弱性

• CVE-2023-26314高 8.8The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type …
• CVE-2012-3543高 7.5mono 2.10.x ASP.NET Web Form Hash collision DoS
• CVE-2015-2319高 7.5The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via craft…
• CVE-2015-2318高 8.1The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clie…