Lucene search

K
mageiaGentoo FoundationMGASA-2014-0244
HistoryMay 29, 2014 - 11:07 a.m.

Updated mono packages fix security vulnerability

2014-05-2911:07:39
Gentoo Foundation
advisories.mageia.org
9

0.006 Low

EPSS

Percentile

78.8%

Mono 2.10.9 does not properly randomize hash functions for form posts to protect against hash collision attacks. A remote attacker could send specially crafted parameters, possibly resulting in a Denial of Service condition (CVE-2012-3543).

OSVersionArchitecturePackageVersionFilename
Mageia3noarchmono< 2.10.9-4.1mono-2.10.9-4.1.mga3

0.006 Low

EPSS

Percentile

78.8%