Description
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
References (7)
Core 7
Core References
Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2018/Aug/46
Broken Link vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/108106
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujul2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujan2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuoct2020.html
Scores
CVSS v3
9.8
EPSS
0.0162
EPSS Percentile
82.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Details
CWE
CWE-125
Status
published
Products (24)
dell/bsafe
4.0.0 - 4.0.11
dell/bsafe_crypto-c
4.0.0 - 4.0.5.3
oracle/application_testing_suite
13.3.0.1
oracle/communications_analytics
12.1.1
oracle/communications_ip_service_activator
7.3.0
oracle/communications_ip_service_activator
7.4.0
oracle/core_rdbms
11.2.0.4
oracle/core_rdbms
12.1.0.2
oracle/core_rdbms
12.2.0.1
oracle/core_rdbms
18c
... and 14 more
Published
Sep 14, 2018
Tracked Since
Feb 18, 2026