GCVE - cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Mono Project (`16e9d496-3279-5484-9582-e49365206b47`)
Product	Mono (`6c7baec9-77f9-5c52-b59e-5a9ab7deb9d9`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/mono/mono`	purl2cpe	2026-06-01 10:14:50.633815

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2015-2320`	vulnerable	2026-06-08 05:06:28.014146	Details available The TLS stack in Mono before 3.12.1 allows remote attackers to have unspecified impact via vectors related to client-side SSLv2 fallback. Published: 2018-01-08T19:00:00.000Z Updated: 2024-08-06T05:10:16.135Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2547-1 https://bugzilla.redhat.com/show_bug.cgi?id=1202869 http://www.securityfocus.com/bid/73256 https://github.com/mono/mono/commit/b371da6b2d68b4cdd0f21d6342af6c42794f998b http://www.openwall.com/lists/oss-security/2015/03/17/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2319`	vulnerable	2026-06-08 05:06:28.013621	Details available The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204. Published: 2018-01-08T19:00:00.000Z Updated: 2024-08-06T05:10:15.990Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2547-1 http://www.securityfocus.com/bid/73250 https://bugzilla.redhat.com/show_bug.cgi?id=1202869 https://mitls.org/pages/attacks/SMACK#freak http://www.openwall.com/lists/oss-security/2015/03/17/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2015-2318`	vulnerable	2026-06-08 05:06:28.011960	Details available The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue. Published: 2018-01-08T19:00:00.000Z Updated: 2024-08-06T05:10:16.256Z Open on db.gcve.eu Reference links http://www.ubuntu.com/usn/USN-2547-1 https://mitls.org/pages/attacks/SMACK#skip https://bugzilla.redhat.com/show_bug.cgi?id=1202869 http://www.securityfocus.com/bid/73253 http://www.openwall.com/lists/oss-security/2015/03/17/9	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2012-3543`	vulnerable	2026-06-08 05:02:10.588036	Details available mono 2.10.x ASP.NET Web Form Hash collision DoS Published: 2019-11-21T14:00:56.000Z Updated: 2024-08-06T20:13:50.119Z Open on db.gcve.eu Reference links https://security-tracker.debian.org/tracker/CVE-2012-3543 https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3543 https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-3543 https://access.redhat.com/security/cve/cve-2012-3543 https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-3543	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.