CVE-2018-1232

2018-03-2600:00:00

dell

www.cve.org

0.001 Low

EPSS

Percentile

39.8%

JSON

RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.

CNA Affected

[
  {
    "product": "RSA Authentication Agent for Web for IIS, RSA Authentication Agent for Web for Apache Web Server",
    "vendor": "Dell EMC",
    "versions": [
      {
        "status": "affected",
        "version": "version 8.0.1 and earlier"
      }
    ]
  }
]

References

seclists.org/fulldisclosure/2018/Mar/60

www.securitytracker.com/id/1040577

0.001 Low

EPSS

Percentile

39.8%

JSON

Related for CVELIST:CVE-2018-1232