CVE-2015-2318
Fixed in a distro release EPSS 2%
The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.
Products: mono_project mono, debian_linux
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mono | 3.2.8+dfsg-10 |
| Debian 13 | mono | 3.2.8+dfsg-10 |
| Debian 14 | mono | 3.2.8+dfsg-10 |
| Debian 6.0 | mono | 2.6.7-5.1+deb6u1 |
| Debian 7 | mono | 2.10.8.1-8+deb7u1 |
| Ubuntu 14.04 LTS | mono | 3.2.8+dfsg-4ubuntu1.1 |