High severity8.1NVD Advisory· Published Jan 8, 2018· Updated Jun 17, 2026

CVE-2015-2318

Description

The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mono/Monoinferred3 versions
<3.12.1+ 2 more
- (no CPE)range: <3.12.1
- cpe:2.3:a:mono-project:mono:*:*:*:*:*:*:*:*range: <3.12.1
- (no CPE)range: <3.12.1
Debian/linux
cpe:2.3:o:debian:debian_linux:6.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

www.mono-project.com/news/2015/03/07/mono-tls-vulnerability/nvdVendor Advisory
www.openwall.com/lists/oss-security/2015/03/17/9nvdMailing ListThird Party Advisory
www.securityfocus.com/bid/73253nvdThird Party AdvisoryVDB Entry
www.ubuntu.com/usn/USN-2547-1nvdThird Party Advisory
bugzilla.redhat.com/show_bug.cginvdIssue TrackingThird Party Advisory
github.com/mono/mono/commit/1509226c41d74194c146deb173e752b8d3cdeec4nvdThird Party Advisory
mitls.org/pages/attacks/SMACKnvdThird Party Advisory
www.debian.org/security/2015/dsa-3202nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.526
epss	0.002
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000