CVE-2015-2320
The TLS stack in Mono before 3.12.1 allows remote attackers to have un ...
Einstufung nach Quelle
Trivys eigenes Label ist CRITICAL. Kritisch laut NVD. Niedriger laut Ubuntu (mittel).
Beschreibung
The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.
Betroffene Pakete und behobene Versionen
| Quelle | Paket | Behoben in |
|---|---|---|
| debian 11 | mono | 3.2.8+dfsg-10 |
| debian 12 | mono | 3.2.8+dfsg-10 |
| debian 13 | mono | 3.2.8+dfsg-10 |
| debian 14 | mono | 3.2.8+dfsg-10 |
| debian 7 | mono | 2.10.8.1-8+deb7u1 |
| echo | mono | 3.2.8+dfsg-10 |
| ubuntu 12.04 | mono | 2.10.8.1-1ubuntu2.3 |
| ubuntu 14.04 | mono | 3.2.8+dfsg-4ubuntu1.1 |
| ubuntu 14.04-ESM | mono | 3.2.8+dfsg-4ubuntu1.1 |
| ubuntu 14.10 | mono | 3.2.8+dfsg-4ubuntu2.1 |
Referenzen
- http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
- http://www.openwall.com/lists/oss-security/2015/03/17/9
- http://www.securityfocus.com/bid/73256
- http://www.ubuntu.com/usn/USN-2547-1
- https://bugzilla.redhat.com/show_bug.cgi?id=1202869
- https://github.com/mono/mono/commit/b371da6b2d68b4cdd0f21d6342af6c42794f998b
- https://ubuntu.com/security/notices/USN-2547-1
- https://www.cve.org/CVERecord?id=CVE-2015-2320