The vulnerabilities of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools, as well as the Oracle Database Server database management system and the Oracle Fusion Middleware software platform, are caused by an operation that goes beyond the buffer boundaries in memory. This allows a malicious actor to execute arbitrary code in the context of the current user.

🗓️ 30 Jul 2019 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

Buffer boundary violations enable arbitrary code execution as the current user on RSA Micro Edition, Crypto-C Micro Edition, Oracle Database Server, and Oracle Fusion Middleware.

Reporter	Title	Published	Views	Family All 21
CNVD	Dell EMC RSA BSAFE Micro Edition Suite and RSA BSAFE Crypto-C Micro Edition Buffer Overflow Vulnerability	26 Sep 201800:00	–	cnvd
CVE	CVE-2018-11058	14 Sep 201820:00	–	cve
Cvelist	CVE-2018-11058	14 Sep 201820:00	–	cvelist
EUVD	EUVD-2018-3102	7 Oct 202500:30	–	euvd
NCSC	Vulnerabilities fixed in Oracle PeopleSoft	21 Oct 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Enterprise Manager	21 Oct 202000:00	–	ncsc
NCSC	Vulnerabilities fixed in Oracle Fusion Middleware	22 Oct 202000:00	–	ncsc
NVD	CVE-2018-11058	14 Sep 201820:29	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2020	14 Apr 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - January 2020	14 Jan 202000:00	–	oracle

Vulners

Node

oracle fusion_middlewareMatch11.1.1.9.0

oracle fusion_middlewareMatch12.1.3.0.0

oracle fusion_middlewareMatch12.2.1.3.0

oracle enterprise_manager_ops_centerMatch12.3.3

oracle database_serverMatch11.2.0.4

oracle database_serverMatch12.1.0.2

oracle database_serverMatch12.2.0.1

oracle database_serverMatch18c

oracle database_serverMatch19c

rsa_security_llc rsa_bsafe_crypto-c_micro_editionRange4.0.0–4.0.5.3

rsa_security_llc rsa_bsafe_micro_edition_suiteRange4.0.0–4.0.11

rsa_security_llc rsa_bsafe_micro_edition_suiteRange4.1.0–4.1.6

oracle enterprise_manager_ops_centerMatch12.4.0

oracle oracle_communications_ip_service_activatorMatch7.3.4

oracle oracle_communications_ip_service_activatorMatch7.4.0

Source	Link
seclists	www.seclists.org/fulldisclosure/2018/Aug/46
securityfocus	www.securityfocus.com/bid/108106
oracle	www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
oracle	www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
web	www.web.nvd.nist.gov/view/vuln/detail

23 Mar 2021 00:00Current

8.7High risk

Vulners AI Score8.7

CVSS 39.8

CVSS 210

EPSS0.01619