← Back

CVE-2018-11054

nvd nist
Published: Aug 31, 2018Modified: Nov 21, 2024

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Exploitability: 3.9 / Impact: 3.6
Source: NVD

Description

RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.

Affected (23)

Dell
1 product
Bsafe
Oracle
11 products
Application Testing Suite
Communications Analytics
Communications Ip Service Activator
Core Rdbms
Enterprise Manager Ops Center
Goldengate Application Adapters
Jd Edwards Enterpriseone Tools
Real User Experience Insight
Retail Predictive Application Server
Security Service
Timesten In Memory Database
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Bsafe
Version 4.1.6
Configuration B
22 vulnerable
Vulnerable SoftwareAffected Versions
Application Testing Suite
Version 13.3.0.1
Communications Analytics
Version 12.1.1
Oracle
Communications Ip Service Activator
Version 7.3.4
Communications Ip Service Activator
Version 7.4.0
Oracle
Core Rdbms
Version 11.2.0.4
Core Rdbms
Version 12.1.0.2
Core Rdbms
Version 12.2.0.1
Core Rdbms
Version 18c
Core Rdbms
Version 19c
Oracle
Enterprise Manager Ops Center
Version 12.3.3
Enterprise Manager Ops Center
Version 12.4.0
Goldengate Application Adapters
Version 12.3.2.1.0
Jd Edwards Enterpriseone Tools
Version 9.2
Oracle
Real User Experience Insight
Version 13.1.2.1
Real User Experience Insight
Version 13.2.3.1
Real User Experience Insight
Version 13.3.1.0
Oracle
Retail Predictive Application Server
Version 15.0.3
Retail Predictive Application Server
Version 16.0.3
Oracle
Security Service
Version 11.1.1.9.0
Security Service
Version 12.1.3.0.0
Security Service
Version 12.2.1.2.0
Timesten In Memory Database
Up to 18.1.4.1.0

Related CWEs

CWE-190
Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.

References (12)

Source: security_alert@emc.com
Mailing ListThird Party Advisory
Source: security_alert@emc.com
PatchThird Party Advisory
Source: security_alert@emc.com
PatchThird Party Advisory
Source: security_alert@emc.com
PatchThird Party Advisory
Source: security_alert@emc.com
PatchThird Party Advisory
Source: security_alert@emc.com
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
PatchThird Party Advisory

Timeline

No history available yet.