CVE-2015-2319
Fixed in a distro release EPSS 3%
The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.
Products: mono_project mono
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Debian 12 | mono | 3.2.8+dfsg-10 |
| Debian 13 | mono | 3.2.8+dfsg-10 |
| Debian 14 | mono | 3.2.8+dfsg-10 |
| Debian 6.0 | mono | 2.6.7-5.1+deb6u1 |
| Debian 7 | mono | 2.10.8.1-8+deb7u1 |
| Ubuntu 14.04 LTS | mono | 3.2.8+dfsg-4ubuntu1.1 |