p PatchFirst

CVE-2015-2319

CVE-2015-2319

This page contains facts from public vulnerability sources. Check the original advisory before updating.

The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.

CVSS 7.5 · High · EPSS 3.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • mono Debian:12

    Affected ranges
    • ECOSYSTEM: < 3.2.8+dfsg-10

    Update to 3.2.8+dfsg-10

  • mono Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.2.8+dfsg-10

    Update to 3.2.8+dfsg-10

  • mono Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.2.8+dfsg-10

    Update to 3.2.8+dfsg-10

  • mono Ubuntu:14.04:LTS

    Versions
    • 2.10.8.1-5ubuntu2
    • 3.2.3+dfsg-5
    • 3.2.3+dfsg-7ubuntu1
    • 3.2.8+dfsg-4ubuntu1
    Affected ranges
    • ECOSYSTEM: < 3.2.8+dfsg-4ubuntu1.1

    Update to 3.2.8+dfsg-4ubuntu1.1

Original sources

Check your server →