CVE-2015-2318: Debian Linux

High severity, CVSS 8.1. EPSS: 2% chance of exploitation in the next 30 days.

The TLS stack in Mono before 3.12.1 allows man-in-the-middle attackers to conduct message skipping attacks and consequently impersonate clients by leveraging missing handshake state validation, aka a "SMACK SKIP-TLS" issue.

Affected products

• Debian Debian Linux: version 6.0 only
• Mono-Project Mono: before 3.12.1 (fixed in 3.12.1)

Published 2018-01-08. Last modified 2026-06-17.