The vulnerabilities of the RSA BSAFE Micro Edition Suite, BSAFE Crypto-C Micro Edition, and Oracle Security Service software; the Oracle Database Server database management system; the Oracle Communications IP Service Activator network software; and the Enterprise Manager Ops Center virtualization management system. These vulnerabilities involve uncontrolled resource consumption, allowing attackers to trigger service failures.

🗓️ 03 Feb 2020 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 5 Views

Vulnerabilities in BSAFE and Oracle products allow uncontrolled resource usage and remote service interruptions.

Reporter	Title	Published	Views	Family All 12
CNVD	Dell EMC RSA BSAFE Micro Edition Suite and RSA BSAFE Crypto-C Micro Edition Resource Exhaustion Vulnerability	4 Sep 201800:00	–	cnvd
CVE	CVE-2018-11056	31 Aug 201818:00	–	cve
Cvelist	CVE-2018-11056	31 Aug 201818:00	–	cvelist
EUVD	EUVD-2018-3100	7 Oct 202500:30	–	euvd
NVD	CVE-2018-11056	31 Aug 201818:29	–	nvd
Oracle	Oracle Critical Patch Update Advisory - April 2020	14 Apr 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - January 2020	14 Jan 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2019	16 Jul 201900:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - July 2020	14 Jul 202000:00	–	oracle
Oracle	Oracle Critical Patch Update Advisory - October 2020	20 Oct 202000:00	–	oracle

Vulners

Node

oracle enterprise_manager_ops_centerMatch12.3.3

OR

oracle database_serverMatch11.2.0.4

OR

oracle database_serverMatch12.1.0.2

OR

oracle database_serverMatch12.2.0.1

OR

oracle database_serverMatch18c

OR

oracle database_serverMatch19c

OR

rsa_security_llc rsa_bsafe_crypto-c_micro_editionRange4.0.0–4.0.5.3

OR

oracle enterprise_manager_ops_centerMatch12.4.0

OR

oracle oracle_communications_ip_service_activatorMatch7.3.4

OR

oracle oracle_communications_ip_service_activatorMatch7.4.0

OR

oracle security_serviceMatch11.1.1.9.0

OR

oracle security_serviceMatch12.1.3.0.0

OR

oracle security_serviceMatch12.2.1.3.0

OR

rsa_security_llc rsa_bsafe_micro_edition_suiteRange4.1.0–4.1.6.1

Source	Link
oracle	www.oracle.com/security-alerts/public-vuln-to-advisory-mapping.html
oracle	www.oracle.com/security-alerts/cpujul2019.html
oracle	www.oracle.com/security-alerts/cpujan2020.html
nvd	www.nvd.nist.gov/vuln/detail/CVE-2018-11056
seclists	www.seclists.org/fulldisclosure/2018/Aug/46
web	www.web.nvd.nist.gov/view/vuln/detail

03 Feb 2020 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS 36.5

CVSS 26.8

EPSS0.01869

BSAFE Micro Edition BSAFE Crypto Micro Edition Oracle Security Service Oracle Database Server Oracle IP Activator Ops Center