CVE-2018-11054

RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.

Score

CVSS 3.1 7.5 High

Status

Modified - security_alert@emc.com

Published

2018-08-31

Last modified

2024-08-05

Weaknesses

CWE-190

Affected products

• Bsafe (Dell)
• Application Testing Suite (Oracle)
• Communications Analytics (Oracle)
• Communications Ip Service Activator (Oracle)
• Core Rdbms (Oracle)
• Enterprise Manager Ops Center (Oracle)
• Goldengate Application Adapters (Oracle)
• Jd Edwards Enterpriseone Tools (Oracle)
• Real User Experience Insight (Oracle)
• Retail Predictive Application Server (Oracle)
• Security Service (Oracle)
• Timesten In-memory Database (Oracle)
• Bsafe Micro Edition Suite (Rsa)

References

• http://seclists.org/fulldisclosure/2018/Aug/46
• https://www.oracle.com/security-alerts/cpuapr2020.html
• https://www.oracle.com/security-alerts/cpujan2020.html
• https://www.oracle.com/security-alerts/cpujul2020.html
• https://www.oracle.com/security-alerts/cpuoct2020.html
• https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html