Buffer overflow in the Mono.Math.BigInteger class in Mono 1.2.5.1 and earlier allows context-dependent attackers to execute arbitrary code via unspecified vectors related to Reduce in Montgomery-based Pow methods.
CVSS Details
- CVSS 3.1 Base Score: 7.3
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade mono | Jul 30, 2024 | Nov 2, 2007 |
| Gentoo Linux | — | Upgrade dev-lang/mono. | Oct 30, 2017 | Nov 2, 2007 |
| Suse | — | Upgrade mono-data-postgresqlUpgrade mono-webUpgrade mono-data-sqliteUpgrade mono-develUpgrade suse-releaseUpgrade mono-extrasUpgrade mono-jscriptUpgrade mono-locale-extrasUpgrade mono-winformsUpgrade mono-core-32bitUpgrade mono-data-firebirdUpgrade bytefx-data-mysqlUpgrade mono-data-sybaseUpgrade mono-data-oracleUpgrade mono-dataUpgrade mono-nunitUpgrade ibm-data-db2Upgrade mono-basicUpgrade mono-core | Feb 17, 2015 | Nov 2, 2007 |
| Ubuntu | — | Upgrade libmono-security2.0-cilUpgrade mono-classlib-1.0Upgrade mono-classlib-2.0Upgrade libmono-corlib1.0-cilUpgrade libmono-security1.0-cilUpgrade libmono-corlib2.0-cil | Nov 8, 2024 | Nov 2, 2007 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub