Heap-based Buffer Overflow in RSA BSAFE Micro Edition Suite by RSA Security

CVE-2019-3729

Summary

The RSA BSAFE Micro Edition Suite versions prior to 4.4 are susceptible to a heap-based buffer overflow vulnerability when processing ECDSA signatures. This flaw permits malicious users with adjacent network access to potentially exploit it, leading to unexpected crashes in the library of the affected system. It is crucial for organizations utilizing this software to assess their environments and apply necessary updates to mitigate risks associated with this vulnerability.

References