oss-sec mailing list archives

CVE Request: Hash collision issue in Mono/C# (similar to Microsoft .NET issue)


From: Marcus Meissner <meissner () suse de>
Date: Tue, 28 Aug 2012 17:19:45 +0200

Hi,

The hash collision problem can also be found in the C# Mono implementation.

http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3414
describes the issue for the Microsoft .NET runtime, but as the issue
is also in the Mono implementation it needs a different
CVE there.

References:
https://bugzilla.novell.com/show_bug.cgi?id=739119
https://github.com/mono/mono/commit/2ab1a051058fee5ea3aec2e071fba7000b693488
https://github.com/mono/mono/commit/c3e088bf2fc22d66d0f17b74676de366f661c3eb

Ciao, Marcus


Current thread: