Integer Overflow Vulnerability in RSA BSAFE Micro Edition Suite by Oracle
CVE-2018-11054

7.5HIGH

Key Information:

Vendor

Rsa
Status
Bsafe Micro Edition Suite
Vendor
CVE Published:
31 August 2018

What is CVE-2018-11054?

The RSA BSAFE Micro Edition Suite 4.1.6 is affected by an integer overflow vulnerability that allows remote attackers to craft malicious ASN.1 data. Exploitation of this vulnerability could lead to a Denial of Service condition, disrupting service availability. It is vital for users of the affected version to review their security posture and apply necessary mitigations to safeguard their systems.

Affected Version(s)

BSAFE Micro Edition Suite 4.1.6

References

http://seclists.org/fulldisclosure/2018/Aug/46
mailing-listx_refsource_FULLDISC
https://www.oracle.com/security-alerts/cpuapr2020.html
x_refsource_MISC
https://www.oracle.com/security-alerts/cpujul2020.html
x_refsource_MISC

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.