CVE-2017-12818

Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.

Score

CVSS 3.0 7.5 High

Status

Modified - vulnerability@kaspersky.com

Published

2017-10-04

Last modified

2024-09-16

Weaknesses

CWE-119

Affected products

• Gemaltos Hasp Srm (Gemalto)
• Sentinel Hasp And Sentinel Ldk Products Prior To Sentinel Ldk Rte (Gemalto)
• Sentinel Ldk Rte Firmware (Sentinel)

References

• http://www.securityfocus.com/bid/102906
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in…
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01