mono 2.10.x ASP.NET Web Form Hash collision DoS

mono-core was updated to fix the following vulnerabilities :

  - CVE-2009-0689: Remote attackers could cause a denial of     service and possibly arbitrary code execution through     the string-to-double parser implementation. (bsc#958097)

  - CVE-2012-3543: Remote attackers could cause a denial of     service through increased CPU consumption due to lack of     protection against predictable hash collisions when     processing form parameters. (bsc#739119)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

mono-core was updated to fix the following vulnerabilities :

  - CVE-2009-0689: Remote attackers could cause a denial of     service and possibly arbitrary code execution through     the string-to-double parser implementation (bsc#958097)

  - CVE-2012-3543: Remote attackers could cause a denial of     service through increased CPU consumption due to lack of     protection against predictable hash collisions when     processing form parameters (bsc#739119)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2547-1 advisory.

    It was discovered that the Mono TLS implementation was vulnerable to the SKIP-TLS vulnerability. A remote     attacker could possibly use this issue to perform client impersonation attacks. (CVE-2015-2318)

    It was discovered that the Mono TLS implementation was vulnerable to the FREAK vulnerability. A remote     attacker or a machine-in-the-middle could possibly use this issue to force the use of insecure     ciphersuites. (CVE-2015-2319)

    It was discovered that the Mono TLS implementation still supported a fallback to SSLv2. This update     removes the functionality as use of SSLv2 is known to be insecure. (CVE-2015-2320)

    It was discovered that Mono incorrectly handled memory in certain circumstances. A remote attacker could     possibly use this issue to cause Mono to crash, resulting in a denial of service, or to obtain sensitive     information. This issue only applied to Ubuntu 12.04 LTS. (CVE-2011-0992)

    It was discovered that Mono incorrectly handled hash collisions. A remote attacker could possibly use this     issue to cause Mono to crash, resulting in a denial of service. This issue only applied to Ubuntu 12.04     LTS. (CVE-2012-3543)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote host is affected by the vulnerability described in GLSA-201405-16 (Mono: Denial of Service)

    Mono does not properly randomize hash functions for form posts to       protect against hash collision attacks.
  Impact :

    A remote attacker could send specially crafted parameters, possibly       resulting in a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Severity
95452	SUSE SLES11 Security Update : mono-core (SUSE-SU-2016:2958-1)	Nessus	SuSE Local Security Checks	high
88454	SUSE SLED11 / SLES11 Security Update : mono-core (SUSE-SU-2016:0257-1)	Nessus	SuSE Local Security Checks	high
82074	Ubuntu 14.04 LTS : Mono vulnerabilities (USN-2547-1)	Nessus	Ubuntu Local Security Checks	critical
74098	GLSA-201405-16 : Mono: Denial of Service	Nessus	Gentoo Local Security Checks	high

Detections

Analytics

CVE-2012-3543

high

Tenable Plugins

high

high

critical

high