PublicDateAtUSN: 2012-08-28
Candidate: CVE-2012-3543
PublicDate: 2019-11-21 14:15:00 UTC
References:
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-3543
 http://www.openwall.com/lists/oss-security/2012/08/28
 https://ubuntu.com/security/notices/USN-2547-1
Description:
 mono 2.10.x ASP.NET Web Form Hash collision DoS
Ubuntu-Description:
Notes:
Bugs:
 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686562
 https://bugzilla.novell.com/show_bug.cgi?id=739119
Priority: low
Discovered-by:
Assigned-to: mdeslaur
CVSS:
 nvd: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H [7.5 HIGH]

Patches_mono:
 upstream: https://github.com/mono/mono/commit/2ab1a051058fee5ea3aec2e071fba7000b693488
 upstream: https://github.com/mono/mono/commit/c3e088bf2fc22d66d0f17b74676de366f661c3eb
 upstream: https://github.com/mono/mono/commit/04245de5c480db5dff5983467f7a8606f1321ed6 (2.10)
 upstream: https://github.com/mono/mono/commit/049bb49f1c5b650166de2a266bc1879c5def0190 (2.10)
upstream_mono: released (2.10.8.1-7)
hardy_mono: ignored (reached end-of-life)
lucid_mono: ignored (reached end-of-life)
natty_mono: ignored (reached end-of-life)
oneiric_mono: ignored (reached end-of-life)
precise_mono: released (2.10.8.1-1ubuntu2.3)
quantal_mono: ignored (reached end-of-life)
raring_mono: ignored (reached end-of-life)
saucy_mono: ignored (reached end-of-life)
trusty_mono: not-affected (3.2.8+dfsg-4ubuntu1)
trusty/esm_mono: not-affected (3.2.8+dfsg-4ubuntu1)
utopic_mono: not-affected (3.2.8+dfsg-4ubuntu2)
devel_mono: not-affected (3.2.8+dfsg-4ubuntu3)