Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2019-3728

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 be

Description

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Dell RSA BSAFE Crypto-C Micro Edition

Default version status: unaffected

  • 4.0.0.0 to < 4.0.5.4affected
  • 4.1.0 to < 4.1.4affected

Dell RSA BSAFE Micro Edition Suite

Default version status: unaffected

  • 4.0.0 to < 4.0.13affected
  • 4.1.0 to < 4.4affected

Dell RSA Crypto-C

Default version status: affected

  • 6.0.0 to ≤ 6.4.*affected

References