Описание
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.
| Релиз | Статус | Примечание |
|---|---|---|
| devel | released | 3.2.8+dfsg-4ubuntu4 |
| esm-infra-legacy/trusty | released | 3.2.8+dfsg-4ubuntu1.1 |
| lucid | ignored | end of life |
| precise | released | 2.10.8.1-1ubuntu2.3 |
| trusty | released | 3.2.8+dfsg-4ubuntu1.1 |
| trusty/esm | released | 3.2.8+dfsg-4ubuntu1.1 |
| upstream | released | 3.2.8+dfsg-10,2.6.7-5.1+deb6u1 |
| utopic | released | 3.2.8+dfsg-4ubuntu2.1 |
Показывать по
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3
Связанные уязвимости
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers ...
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.
EPSS
6.8 Medium
CVSS2
8.1 High
CVSS3