CVE-2012-3543

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

mono 2.10.x ASP.NET Web Form Hash collision DoS

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
mono	mono	2.10.x

References

http://www.openwall.com/lists/oss-security/2012/08/28/14Exploit, Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/55251Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2547-1Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-3543Broken Link
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Patch, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-3543Third Party Advisory
http://www.openwall.com/lists/oss-security/2012/08/28/14Exploit, Mailing List, Patch, Third Party Advisory
http://www.securityfocus.com/bid/55251Third Party Advisory, VDB Entry
http://www.ubuntu.com/usn/USN-2547-1Third Party Advisory
https://access.redhat.com/security/cve/cve-2012-3543Broken Link
https://bugs.gentoo.org/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Patch, Third Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=CVE-2012-3543Issue Tracking, Patch, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2012-3543Third Party Advisory

Timeline

Published: Nov 21, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2012

CVE-2012-35445.0Apache Tomcat 6.x before 6.0.37 and 7.x before 7.0.30 does not properly handle chunk extensions in chunked transfer coding, which allows rem CVE-2012-35464.3org/apache/catalina/realm/RealmBase.java in Apache Tomcat 6.x before 6.0.36 and 7.x before 7.0.30, when FORM authentication is used, allows CVE-2012-35476.8Stack-based buffer overflow in the cbtls_verify function in FreeRADIUS 2.1.10 through 2.1.12, when using TLS-based EAP methods, allows remot CVE-2012-35484.3The dissect_drda function in epan/dissectors/packet-drda.c in Wireshark 1.6.x through 1.6.10 and 1.8.x through 1.8.2 allows remote attackers CVE-2012-35497.8The SCTP implementation in FreeBSD 8.2 allows remote attackers to cause a denial of service (NULL pointer dereference and kernel panic) via CVE-2012-35514.3Cross-site scripting (XSS) vulnerability in crowbar_framework/app/views/support/index.html.haml in the Crowbar barclamp in Crowbar, possibly CVE-2012-35525.9Race condition in the IP implementation in the Linux kernel before 3.0 might allow remote attackers to cause a denial of service (slab corru CVE-2012-35534.0chan_skinny.c in the Skinny (aka SCCP) channel driver in Asterisk Open Source 10.x before 10.5.1 allows remote authenticated users to cause CVE-2012-35547.5SQL injection vulnerability in the RSGallery2 (com_rsgallery2) component before 2.3.0 for Joomla! 1.5.x, and before 3.2.0 for Joomla! 2.5.x,CVE-2012-35557.6Opera before 11.65 does not ensure that keyboard sequences are associated with a visible window, which makes it easier for user-assisted rem CVE-2012-35569.3Opera before 11.65 does not properly restrict the opening of a pop-up window in response to the first click of a double-click action, which CVE-2012-35575.0Opera before 11.65 does not properly restrict the reading of JSON strings, which allows remote attackers to perform cross-domain loading of