Description
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
RSA BSAFE Micro Edition Suite
unspecified to < 4.0.11affectedunspecified to < 4.1.6.1affected
RSA BSAFE Crypto-C Micro Edition
unspecified to < 4.0.5.3affected
References
- http://seclists.org/fulldisclosure/2018/Aug/46 ↗
- http://www.securityfocus.com/bid/108106 ↗
- https://www.oracle.com/security-alerts/cpuapr2020.html ↗
- https://www.oracle.com/security-alerts/cpujul2020.html ↗
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html ↗
- https://www.oracle.com/security-alerts/cpujan2020.html ↗
- https://www.oracle.com/security-alerts/cpuoct2020.html ↗