CVE-2018-11054
Severity CVSS v4.0:
Pending analysis
Type:
CWE-190
Integer Overflow or Wraparound
Publication date:
31/08/2018
Last modified:
18/04/2022
Description
RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
Impact
Base Score 3.x
7.50
Severity 3.x
HIGH
Base Score 2.0
5.00
Severity 2.0
MEDIUM
Vulnerable products and versions
CPE | From | Up to |
---|---|---|
cpe:2.3:a:dell:bsafe:4.1.6:*:*:*:micro_edition_suite:*:*:* | ||
cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:communications_analytics:12.1.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:communications_ip_service_activator:7.3.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:core_rdbms:11.2.0.4:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:core_rdbms:12.1.0.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:core_rdbms:12.2.0.1:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:core_rdbms:18c:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:core_rdbms:19c:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:*:*:*:*:*:*:* | ||
cpe:2.3:a:oracle:real_user_experience_insight:13.1.2.1:*:*:*:*:*:*:* |
To consult the complete list of CPE names with products and versions, see this page
References to Advisories, Solutions, and Tools
- http://seclists.org/fulldisclosure/2018/Aug/46
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html