Lucene search
PRIOn knowledge basePRION:CVE-2015-2318HistoryJan 08, 2018 - 7:29 p.m.
Design/Logic Flaw
2018-01-0819:29:00
PRIOn knowledge base
www.prio-n.com
5
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a “SMACK SKIP-TLS” issue.
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 6.0 | |
| mono | lt | 3.12.1 |
References
www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
www.openwall.com/lists/oss-security/2015/03/17/9
www.securityfocus.com/bid/73253
www.ubuntu.com/usn/USN-2547-1
bugzilla.redhat.com/show_bug.cgi?id=1202869
github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
mitls.org/pages/attacks/SMACK
www.debian.org/security/2015/dsa-3202
Related
debiancve
debiancve
CVE-2015-2318
2018-01-08 19:29:00
ubuntucve
ubuntucve
CVE-2015-2318
2015-03-18 00:00:00
cve
cve
CVE-2015-2318
2018-01-08 19:29:00
cvelist
cvelist
CVE-2015-2318
2018-01-08 19:00:00
nvd
nvd
CVE-2015-2318
2018-01-08 19:29:00
securityvulns
securityvulns
[SECURITY] [DSA 3202-1] mono security update
2015-05-11 00:00:00
mono security vulnerabilities
2015-05-11 00:00:00
openvas
openvas
Debian: Security Advisory (DLA-176-1)
2023-03-08 00:00:00
Debian: Security Advisory (DSA-3202-1)
2015-03-21 00:00:00
SUSE: Security Advisory (SUSE-SU-2015:0841-1)
2021-06-09 00:00:00
nessus
nessus
Debian DSA-3202-1 : mono - security update
2015-03-24 00:00:00
Debian DLA-176-1 : mono security update
2015-03-26 00:00:00
SuSE 11.3 Security Update : Mono (SAT Patch Number 10497)
2015-05-11 00:00:00
osv
osv
mono - security update
2015-03-19 00:00:00
mono - security update
2015-03-22 00:00:00
debian
debian
[SECURITY] [DSA 3202-1] mono security update
2015-03-22 16:33:03
[SECURITY] [DLA 176-1] mono security update
2015-03-19 12:40:55
[SECURITY] [DSA 3202-1] mono security update
2015-03-22 16:33:03
mageia
mageia
Updated mono packages fix security vulnerabilities
2015-04-15 19:07:57
ubuntu
ubuntu
Mono vulnerabilities
2015-03-24 00:00:00