CVE-2011-0992
published 2011-04-13CVE-2011-0992: Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service…
PriorityP424medium5.8CVSS 2.0
AVNACMAuNCPINAP
EPSS
2.69%
84.3th percentile
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
Affected
9 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | mono | — | — |
| mono | mono | >= 0 < 3.2.8+dfsg-4ubuntu1.1 | 3.2.8+dfsg-4ubuntu1.1 |
| mono | mono | >= 0 < 3.2.8+dfsg-4ubuntu1 | 3.2.8+dfsg-4ubuntu1 |
| novell | moonlight | — | — |
| novell | moonlight | — | — |
| novell | moonlight | — | — |
| novell | moonlight | — | — |
| novell | moonlight | — | — |
| novell | moonlight | — | — |
CVSS provenance
nvdv2.05.8MEDIUMAV:N/AC:M/Au:N/C:P/I:N/A:P
osv5.8MEDIUM
vendor_debian5.8LOW
vendor_ubuntu5.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5v2g-vp3m-c3jg: Use-after-free vulnerability in Mono, when Moonlight 2
ghsa_unreviewed·2022-05-17
CVE-2011-0992 [MEDIUM] GHSA-5v2g-vp3m-c3jg: Use-after-free vulnerability in Mono, when Moonlight 2
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
OSV
mono vulnerabilities
osv·2015-03-24·CVSS 5.8
CVE-2015-2318 [MEDIUM] mono vulnerabilities
mono vulnerabilities
It was discovered that the Mono TLS implementation was vulnerable to the
SKIP-TLS vulnerability. A remote attacker could possibly use this issue
to perform client impersonation attacks. (CVE-2015-2318)
It was discovered that the Mono TLS implementation was vulnerable to the
FREAK vulnerability. A remote attacker or a machine-in-the-middle could
possibly use this issue to force the use of insecure ciphersuites.
(CVE-2015-2319)
It was discovered that the Mono TLS implementation still supported a
fallback to SSLv2. This update removes the functionality as use of SSLv2 is
known to be insecure. (CVE-2015-2320)
It was discovered that Mono incorrectly handled memory in certain
circumstances. A remote attacker could possibly use this issue to cause
Mono to crash, resulting
OSV
CVE-2011-0992: Use-after-free vulnerability in Mono, when Moonlight 2
osv·2011-04-13·CVSS 5.8
CVE-2011-0992 [MEDIUM] CVE-2011-0992: Use-after-free vulnerability in Mono, when Moonlight 2
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
Ubuntu
Mono vulnerabilities
vendor_ubuntu·2015-03-24·CVSS 5.8
CVE-2011-0992 [MEDIUM] Mono vulnerabilities
Title: Mono vulnerabilities
Summary: Several security issues were fixed in Mono.
It was discovered that the Mono TLS implementation was vulnerable to the
SKIP-TLS vulnerability. A remote attacker could possibly use this issue
to perform client impersonation attacks. (CVE-2015-2318)
It was discovered that the Mono TLS implementation was vulnerable to the
FREAK vulnerability. A remote attacker or a machine-in-the-middle could
possibly use this issue to force the use of insecure ciphersuites.
(CVE-2015-2319)
It was discovered that the Mono TLS implementation still supported a
fallback to SSLv2. This update removes the functionality as use of SSLv2 is
known to be insecure. (CVE-2015-2320)
It was discovered that Mono incorrectly handled memory in certain
circumstances. A remote attacker co
Debian
CVE-2011-0992: mono - Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x bef...
vendor_debian·2011·CVSS 5.8
CVE-2011-0992 [MEDIUM] CVE-2011-0992: mono - Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x bef...
Use-after-free vulnerability in Mono, when Moonlight 2.x before 2.4.1 or 3.x before 3.99.3 is used, allows remote attackers to cause a denial of service (plugin crash) or obtain sensitive information via vectors related to member data in a resurrected MonoThread instance.
Scope: local
bookworm: resolved
bullseye: resolved
forky: resolved
sid: resolved
trixie: resolved
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2011-0989 CVE-2011-0990 CVE-2011-0991 CVE-2011-0992 mono: multiple vulnerabilities fixed in 2.4.1/3.99.3
bugzilla·2011-04-08·CVSS 5.8
CVE-2011-0989 [MEDIUM] CVE-2011-0989 CVE-2011-0990 CVE-2011-0991 CVE-2011-0992 mono: multiple vulnerabilities fixed in 2.4.1/3.99.3
CVE-2011-0989 CVE-2011-0990 CVE-2011-0991 CVE-2011-0992 mono: multiple vulnerabilities fixed in 2.4.1/3.99.3
It was reported [1] that threads in Mono were not properly cleaned up upon finalization, so if one thread was resurrected, it would be possible to see the pointer to freed memory. This could lead to unintended information disclosure, and possibly a crash.
This has been corrected upstream [2].
[1] https://bugzilla.novell.com/show_bug.cgi?id=678515
[2] https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91
Discussion:
Created mono tracking bugs for this issue
Affects: fedora-all [bug 694934]
---
There are additional flaws that were fixed in mono, but judging by their descriptions, they are only problems when moonlight is used (which we do not ship).
For
Bugzilla
CVE-2011-0992 mono: information leak due to improper thread finalization [fedora-all]
bugzilla·2011-04-08·CVSS 5.8
CVE-2011-0992 [MEDIUM] CVE-2011-0992 mono: information leak due to improper thread finalization [fedora-all]
CVE-2011-0992 mono: information leak due to improper thread finalization [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected Fedora
versions.
For comments that are specific to the vulnerability please use bugs filed
against "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When creating a Bodhi update request, please include the bug IDs of the
respective parent bugs filed against the "Security Response" product.
Please mention CVE ids in the RPM changelog when available.
Bodhi update submission link:
https://admin.fedoraproject.org/updates/new/?type_=security&bugs=694933
Please note: this issue affec
http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.htmlhttp://openwall.com/lists/oss-security/2011/04/06/14http://secunia.com/advisories/44002http://secunia.com/advisories/44076http://www.mono-project.com/Vulnerabilitieshttp://www.securityfocus.com/bid/47208http://www.vupen.com/english/advisories/2011/0904https://bugzilla.novell.com/show_bug.cgi?id=667077https://bugzilla.novell.com/show_bug.cgi?id=678515https://bugzilla.redhat.com/show_bug.cgi?id=694933https://exchange.xforce.ibmcloud.com/vulnerabilities/66627https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91http://lists.opensuse.org/opensuse-updates/2011-04/msg00024.htmlhttp://openwall.com/lists/oss-security/2011/04/06/14http://secunia.com/advisories/44002http://secunia.com/advisories/44076http://www.mono-project.com/Vulnerabilitieshttp://www.securityfocus.com/bid/47208http://www.vupen.com/english/advisories/2011/0904https://bugzilla.novell.com/show_bug.cgi?id=667077https://bugzilla.novell.com/show_bug.cgi?id=678515https://bugzilla.redhat.com/show_bug.cgi?id=694933https://exchange.xforce.ibmcloud.com/vulnerabilities/66627https://github.com/mono/mono/commit/722f9890f09aadfc37ae479e7d946d5fc5ef7b91
2011-04-13
Published