Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
CVE Vulnerability Details :
CVE-2015-2318
PUBLISHED
More InfoOfficial Page
Assigner-mitre
Assigner Org ID-8254265b-2729-46b6-b9e3-3dfca2d5bfca
View Known Exploited Vulnerability (KEV) details
Published At-08 Jan, 2018 | 19:00
Updated At-06 Aug, 2024 | 05:10
Rejected At-
▼CVE Numbering Authority (CNA)

The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.

Affected Products
Vendor
n/a
Product
n/a
Versions
Affected
  • n/a
Problem Types
TypeCWE IDDescription
textN/An/a
Type: text
CWE ID: N/A
Description: n/a
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.ubuntu.com/usn/USN-2547-1
vendor-advisory
x_refsource_UBUNTU
https://mitls.org/pages/attacks/SMACK#skip
x_refsource_MISC
https://bugzilla.redhat.com/show_bug.cgi?id=1202869
x_refsource_CONFIRM
http://www.securityfocus.com/bid/73253
vdb-entry
x_refsource_BID
http://www.openwall.com/lists/oss-security/2015/03/17/9
mailing-list
x_refsource_MLIST
http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
x_refsource_CONFIRM
https://www.debian.org/security/2015/dsa-3202
vendor-advisory
x_refsource_DEBIAN
https://github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
x_refsource_CONFIRM
Hyperlink: http://www.ubuntu.com/usn/USN-2547-1
Resource:
vendor-advisory
x_refsource_UBUNTU
Hyperlink: https://mitls.org/pages/attacks/SMACK#skip
Resource:
x_refsource_MISC
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1202869
Resource:
x_refsource_CONFIRM
Hyperlink: http://www.securityfocus.com/bid/73253
Resource:
vdb-entry
x_refsource_BID
Hyperlink: http://www.openwall.com/lists/oss-security/2015/03/17/9
Resource:
mailing-list
x_refsource_MLIST
Hyperlink: http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
Resource:
x_refsource_CONFIRM
Hyperlink: https://www.debian.org/security/2015/dsa-3202
Resource:
vendor-advisory
x_refsource_DEBIAN
Hyperlink: https://github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
Resource:
x_refsource_CONFIRM
▼Authorized Data Publishers (ADP)
CVE Program Container
Affected Products
Metrics
VersionBase scoreBase severityVector
Metrics Other Info
Impacts
CAPEC IDDescription
Solutions
Configurations
Workarounds
Exploits
Credits
Timeline
EventDate
Replaced By
Rejected Reason
References
HyperlinkResource
http://www.ubuntu.com/usn/USN-2547-1
vendor-advisory
x_refsource_UBUNTU
x_transferred
https://mitls.org/pages/attacks/SMACK#skip
x_refsource_MISC
x_transferred
https://bugzilla.redhat.com/show_bug.cgi?id=1202869
x_refsource_CONFIRM
x_transferred
http://www.securityfocus.com/bid/73253
vdb-entry
x_refsource_BID
x_transferred
http://www.openwall.com/lists/oss-security/2015/03/17/9
mailing-list
x_refsource_MLIST
x_transferred
http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
x_refsource_CONFIRM
x_transferred
https://www.debian.org/security/2015/dsa-3202
vendor-advisory
x_refsource_DEBIAN
x_transferred
https://github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.ubuntu.com/usn/USN-2547-1
Resource:
vendor-advisory
x_refsource_UBUNTU
x_transferred
Hyperlink: https://mitls.org/pages/attacks/SMACK#skip
Resource:
x_refsource_MISC
x_transferred
Hyperlink: https://bugzilla.redhat.com/show_bug.cgi?id=1202869
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: http://www.securityfocus.com/bid/73253
Resource:
vdb-entry
x_refsource_BID
x_transferred
Hyperlink: http://www.openwall.com/lists/oss-security/2015/03/17/9
Resource:
mailing-list
x_refsource_MLIST
x_transferred
Hyperlink: http://www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/
Resource:
x_refsource_CONFIRM
x_transferred
Hyperlink: https://www.debian.org/security/2015/dsa-3202
Resource:
vendor-advisory
x_refsource_DEBIAN
x_transferred
Hyperlink: https://github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4
Resource:
x_refsource_CONFIRM
x_transferred
Details not found