A hash collision vulnerability in Mono allows remote attackers to cause a Denial of Service condition.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/mono | * | < 2.10.9-r2 | >= 2.10.9-r2 |
Mono is an open source implementation of Microsoft’s .NET Framework.
Mono does not properly randomize hash functions for form posts to protect against hash collision attacks.
A remote attacker could send specially crafted parameters, possibly resulting in a Denial of Service condition.
There is no known workaround at this time.
All Mono users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/mono-2.10.9-r2"
Multiple vulnerabilities were found in Mono, the worst of which allowing for the remote execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/mono | * | < 2.10.2-r1 | >= 2.10.2-r1 |
| dev-util/mono-debugger | * | < 2.8.1-r1 | >= 2.8.1-r1 |
Mono is an open source implementation of Microsoft's .NET Framework.
Multiple vulnerabilities have been discovered in Mono and Mono debugger. Please review the CVE identifiers referenced below for details.
A remote attacker could execute arbitrary code, bypass general constraints, obtain the source code for .aspx applications, obtain other sensitive information, cause a Denial of Service, modify internal data structures, or corrupt the internal state of the security manager.
A local attacker could entice a user into running Mono debugger in a directory containing a specially crafted library file to execute arbitrary code with the privileges of the user running Mono debugger.
A context-dependant attacker could bypass the authentication mechanism provided by the XML Signature specification.
There is no known workaround at this time.
All Mono debugger users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-util/mono-debugger-2.8.1-r1"
All Mono users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/mono-2.10.2-r1"
Mono's BigInteger implementation contains a buffer overflow vulnerability that might lead to the execution of arbitrary code.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/mono | * | < 1.2.5.1-r1 | >= 1.2.5.1-r1 |
Mono provides the necessary software to develop and run .NET client and server applications on various platforms.
IOActive discovered an error in the Mono.Math.BigInteger class, in the reduction step of the Montgomery-based Pow methods, that could lead to a buffer overflow.
A remote attacker could exploit this vulnerability by sending specially crafted data to Mono applications using the BigInteger class, which might lead to the execution of arbitrary code with the privileges of the user running the application (possibly root) or a Denial of Service.
There is no known workaround at this time.
All Mono users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/mono-1.2.5.1-r1"
Mono does not properly sanitize pathnames allowing unauthorized information disclosure.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/mono | * | < 1.2.2.1 | >= 1.2.2.1 |
Mono provides the necessary software to develop and run .NET client and server applications on various platforms.
Jose Ramon Palanco has discovered that the System.Web class in the XSP for the ASP.NET server 1.1 through 2.0 in Mono does not properly validate or sanitize local pathnames which could allow server-side file content disclosure.
An attacker could append a space character to a URI and obtain unauthorized access to the source code of server-side files. An attacker could also read credentials by requesting Web.Config%20 from a Mono server.
There is no known workaround at this time.
All Mono users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/mono-1.2.2.1"
Mono is vulnerable to linking attacks, potentially allowing a local user to overwrite arbitrary files.
| Package | Arch | Vulnerable | Unaffected |
|---|---|---|---|
| dev-lang/mono | * | < 1.1.13.8.1 | >= 1.1.13.8.1 |
Mono provides the necessary software to develop and run .NET client and server applications.
Sebastian Krahmer of the SuSE Security Team discovered that the System.CodeDom.Compiler classes of Mono create temporary files with insecure permissions.
A local attacker could create links in the temporary file directory, pointing to a valid file somewhere on the filesystem. When an affected class is called, this could result in the file being overwritten with the rights of the user running the script.
There is no known workaround at this time.
All Mono users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=dev-lang/mono-1.1.13.8.1"