RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
References
Link | Resource |
---|---|
http://seclists.org/fulldisclosure/2018/Aug/46 | Mailing List Third Party Advisory |
http://www.securityfocus.com/bid/108106 | Broken Link |
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html | Patch Third Party Advisory |
https://www.oracle.com/security-alerts/cpujan2020.html | Patch Third Party Advisory |
https://www.oracle.com/security-alerts/cpuapr2020.html | Patch Third Party Advisory |
https://www.oracle.com/security-alerts/cpujul2020.html | Patch Third Party Advisory |
https://www.oracle.com/security-alerts/cpuoct2020.html | Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Information
Published : 2018-09-14 13:29
Updated : 2022-04-18 11:12
NVD link : CVE-2018-11058
Mitre link : CVE-2018-11058
JSON object : View
CWE
CWE-125
Out-of-bounds Read
Products Affected
oracle
- enterprise_manager_ops_center
- retail_predictive_application_server
- communications_analytics
- goldengate_application_adapters
- security_service
- jd_edwards_enterpriseone_tools
- communications_ip_service_activator
- application_testing_suite
- core_rdbms
- timesten_in-memory_database
- real_user_experience_insight
dell
- bsafe_crypto-c
- bsafe