CVE-2015-2319: Mono-Project Mono

High severity, CVSS 7.5. EPSS: 3.2% chance of exploitation in the next 30 days.

The TLS stack in Mono before 3.12.1 makes it easier for remote attackers to conduct cipher-downgrade attacks to EXPORT_RSA ciphers via crafted TLS traffic, related to the "FREAK" issue, a different vulnerability than CVE-2015-0204.

Affected products

• Mono-Project Mono: before 3.12.1 (fixed in 3.12.1)

Published 2018-01-08. Last modified 2026-06-17.