PT-2019-16677

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 Description The issue is related to an Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. This could allow a malicious remote...

PT-2019-16675

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 RSA Micro Edition Suite versions prior to 4.4 Description The issue is related to an Information Exposure Through Timing Discrepancy, which could be exploited by a malicious remote user ...

CVE-2019-3732: Covert Timing Channel

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

CVE-2019-3728: Out-of-bounds Read

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

CVE-2019-3733: Cleartext Storage of Sensitive Information in Memory

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

CVE-2019-3731: Observable Discrepancy

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of...

CVE-2018-11058: Out-of-bounds Read

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 in 4.0.x and prior to 4.1.6 in 4.1.x, and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 in 4.0.x contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data th...

CVE-2018-11056: Uncontrolled Resource Consumption

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 in 4.1.x, and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 in 4.0.x contain an Uncontrolled Resource Consumption 'Resource Exhaustion' vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 dat...

PT-2018-3353

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1 RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 Oracle Database Server affected versions not specified Oracle Communications IP Service Activator affected versions not specifi...

PT-2018-2951

Name of the Vulnerable Software and Affected Versions RSA BSAFE Micro Edition Suite versions prior to 4.0.11 RSA BSAFE Micro Edition Suite versions prior to 4.1.6 RSA BSAFE Crypto-C Micro Edition version prior to 4.0.5.3 Description The issue is caused by a Buffer Over-Read vulnerability when...

PT-2016-4444

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.1.x before 4.1.5 RSA BSAFE Crypto-C Micro Edition CCME versions 4.0.x through 4.1.x before 4.1.3 RSA BSAFE Crypto-J versions prior to 6.2.1 RSA BSAFE SSL-J versions prior to 6.2.1...

PT-2015-4701

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite MES versions 4.1.x through 4.1.2 RSA BSAFE Crypto-C Micro Edition Crypto-C ME versions prior to 4.0.4 RSA BSAFE Crypto-C Micro Edition Crypto-...

CVE-2015-0537: Integer Underflow (Wrap or Wraparound)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite MES 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition Crypto-C ME before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service...