CVE-2015-2320

Опубликовано: 08 янв. 2018

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.

Ссылки

http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/03/17/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/73256
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2547-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1202869
Issue Tracking
Third Party Advisory
https://github.com/mono/mono/commit/b371da6b2d68b4cdd0f21d6342af6c42794f998b
Third Party Advisory
https://www.debian.org/security/2015/dsa-3202
Third Party Advisory
http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
Vendor Advisory
http://www.openwall.com/lists/oss-security/2015/03/17/9
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/73256
Third Party Advisory
VDB Entry
http://www.ubuntu.com/usn/USN-2547-1
Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1202869
Issue Tracking
Third Party Advisory
https://github.com/mono/mono/commit/b371da6b2d68b4cdd0f21d6342af6c42794f998b
Third Party Advisory
https://www.debian.org/security/2015/dsa-3202
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*

Версия до 3.12.1 (исключая)

Конфигурация 2

cpe:2.3:o:debian:debian_linux:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 89%

0.04829

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-295

Связанные уязвимости

CVE-2015-2320

CVSS3: 9.8

ubuntu

около 8 лет назад

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.

CVE-2015-2320

CVSS3: 9.8

debian

около 8 лет назад

The TLS stack in Mono before 3.12.1 allows remote attackers to have un ...

GHSA-h9v3-p9f8-rw7g

CVSS3: 9.8

github

больше 3 лет назад

The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback.

SUSE-SU-2015:0841-1

suse-cvrf

почти 12 лет назад

Recommended update for mono-core

EPSS

Процентиль: 89%

0.04829

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-295