PT-2011-2800 · Mono+1 · Mono+1

Rodrigo Kumpera · Published 2011-04-13 · Updated 2017-08-17 · CVE-2011-0992

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Mono versions prior to 2.4.1 Mono versions prior to 3.99.3

Description The issue is related to a use-after-free vulnerability, which can be exploited by remote attackers to cause a denial of service, resulting in a plugin crash, or to obtain sensitive information. This is achieved through vectors related to member data in a resurrected MonoThread instance.

Recommendations For versions prior to 2.4.1, update to version 2.4.1 or later. For versions prior to 3.99.3, update to version 3.99.3 or later.

Fix

DoS

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2011-0992

USN-2547-1

Affected Products

Mono

Ubuntu

References · 22

• https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91 · Patch
• https://ubuntu.com/security/CVE-2012-3543 · Vendor Advisory
• https://ubuntu.com/security/CVE-2011-0992 · Vendor Advisory
• http://vupen.com/english/advisories/2011/0904 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2011-0992 · Security Note
• http://secunia.com/advisories/44076 · Vendor Advisory
• https://bugzilla.novell.com/show_bug.cgi?id=667077 · Patch
• http://openwall.com/lists/oss-security/2011/04/06/14 · Patch
• https://cve.org/CVERecord?id=CVE-2011-0992 · Security Note
• https://ubuntu.com/security/notices/USN-2547-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-2318 · Vendor Advisory
• https://ubuntu.com/security/CVE-2015-2320 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-0992 · Vendor Advisory
• https://osv.dev/vulnerability/USN-2547-1 · Vendor Advisory
• http://mono-project.com/Vulnerabilities · Vendor Advisory