CVE-2015-2320

Mô tả

Tham khảo

• mono-project.com/news/2015/03/07/mono-tls-vulnerability · Vendor Advisory
• openwall.com/lists/oss-security/2015/03/17/9 · Mailing List
• securityfocus.com/bid/73256 · Third Party Advisory
• ubuntu.com/usn/USN-2547-1 · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• mono/mono commit b371da6 · Third Party Advisory
• debian.org/security/2015/dsa-3202 · Third Party Advisory

Lỗ hổng khác của mono

• CVE-2023-26314CAO 8.8The mono package before 6.8.0.105+dfsg-3.3 for Debian allows arbitrary code execution because the application/x-ms-dos-executable MIME type …
• CVE-2012-3543CAO 7.5mono 2.10.x ASP.NET Web Form Hash collision DoS
• CVE-2015-2319CAO 7.5The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via craft…
• CVE-2015-2318CAO 8.1The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clie…