Back to feed
EUVD-2018-3098 · Published Aug 31, 2018
RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
Technologies
Oracle Security ServiceOracle Core RdbmsOracle Timesten In-Memory DatabaseOracle Application Testing SuiteOracle Communications Ip Service ActivatorOracle Retail Predictive Application ServerOracle Jd Edwards Enterpriseone ToolsDell BsafeOracle Communications AnalyticsOracle Enterprise Manager Ops CenterOracle Real User Experience InsightOracle Goldengate Application Adapters
Weaknesses
CWE-190
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H - v2.05.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
- http://seclists.org/fulldisclosure/2018/Aug/46
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
Potentially impacted assets
See if this affects your attack surface
