PT-2011-2799 · Mono · Mono

Publicado 2011-04-13 · Atualizado 2017-08-17 · CVE-2011-0991

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Mono versions prior to 2.4.1 Mono versions prior to 3.99.3

Description The issue is related to a use-after-free vulnerability, which can be triggered by finalizing and then resurrecting a DynamicMethod instance. This can allow remote attackers to cause a denial of service or possibly have other unspecified impacts.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later. For versions prior to 3.99.3, update to version 3.99.3 or later.

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2011-0991

Produtos afetados

Mono

Referências · 14

• https://github.com/mono/mono/commit/8eb1189099e02372fd45ca1c67230eccf1edddc0 · Correção
• https://github.com/mono/mono/commit/3f8ee42b8c867d9a4c18c22657840d072cca5c3a · Correção
• https://github.com/mono/mono/commit/89d1455a80ef13cddee5d79ec00c06055da3085c · Correção
• http://vupen.com/english/advisories/2011/0904 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/66626 · Nota
• http://secunia.com/advisories/44076 · Aviso do Fabricante
• https://bugzilla.novell.com/show_bug.cgi?id=660422 · Nota
• http://secunia.com/advisories/44002 · Aviso do Fabricante
• http://mono-project.com/Vulnerabilities · Aviso do Fabricante
• http://securityfocus.com/bid/47208 · Nota
• https://bugzilla.novell.com/show_bug.cgi?id=667077 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2011-0991 · Nota de Segurança
• http://openwall.com/lists/oss-security/2011/04/06/14 · Correção
• http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.html · Nota