Description
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.
References (8)
Core 8
Core References
Broken Link vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105929
Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
https://seclists.org/fulldisclosure/2018/Nov/37
Broken Link vdb-entry
x_refsource_sectrack
http://www.securitytracker.com/id/1042057
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuapr2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujul2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpujan2020.html
Patch, Third Party Advisory x_refsource_misc
https://www.oracle.com/security-alerts/cpuoct2020.html
Scores
CVSS v3
7.5
EPSS
0.0148
EPSS Percentile
81.2%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Details
Status
published
Products (23)
dell/bsafe
4.0.0 - 4.0.11
oracle/application_testing_suite
13.3.0.1
oracle/communications_analytics
12.1.1
oracle/communications_ip_service_activator
7.3.0
oracle/communications_ip_service_activator
7.4.0
oracle/core_rdbms
11.2.0.4
oracle/core_rdbms
12.1.0.2
oracle/core_rdbms
12.2.0.1
oracle/core_rdbms
18c
oracle/core_rdbms
19c
... and 13 more
Published
Nov 16, 2018
Tracked Since
Feb 18, 2026