CVE-2017-12819

CVE-2017-12819 refers to remote manipulation of the Gemalto SafeNet Sentinel language-pack updater, enabling NTLM-relay attacks for the system user in HASP SRM, Sentinel HASP and Sentinel LDK before Sentinel LDK RTE 7.55. Connected advisories corroborate remote NTLM-relay risk and advise upgradin...

CVE-2017-12820

CVE-2017-12820 affects Gemalto SafeNet Sentinel stacks (HASP SRM, Sentinel HASP, Sentinel LDK) prior to Sentinel LDK RTE 7.55. The vulnerability is described as an arbitrary memory read from a controlled memory pointer, which could enable remote denial of service. Public advisories indicate the i...

CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...

CVE-2017-11496

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...

CVE-2017-11497

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via language packs containing filenames longer than 1024 characters...

CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...

PT-2017-12712

Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM affected versions not specified Sentinel HASP affected versions not specified Description The issue allows for remote enabling and disabling of the admin interface in Gemalto's products, leading to...

PT-2017-12709

Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue allows remote manipulations with the language pack updater, leading to an NTLM-relay attack for the system user. Thi...

PT-2017-12711

Name of the Vulnerable Software and Affected Versions Sentinel LDK versions prior to 7.55 HASP SRM versions prior to 7.55 Sentinel HASP versions prior to 7.55 Description The issue is related to memory corruption in Gemalto's products, which might lead to remote code execution. Recommendations Fo...

PT-2017-12708

Name of the Vulnerable Software and Affected Versions Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products versions prior to 7.55 Description The issue is related to a stack overflow in a custom XML-parser, which can lead to a remote denial of service. Recommendations For versions prior to...

CVE-2017-11496

Stack buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to execute arbitrary code via malformed ASN.1 streams in V2C and similar input files...

CVE-2017-11498

Buffer overflow in hasplms in Gemalto ACC Admin Control Center, all versions ranging from HASP SRM 2.10 to Sentinel LDK 7.50, allows remote attackers to shut down the remote process a denial of service via a language pack ZIP file with invalid HTML files...

PT-2017-3349

Name of the Vulnerable Software and Affected Versions Sentinel LDK RTE versions prior to 7.55 Gemalto's HASP SRM and Sentinel HASP affected versions not specified Description The issue is caused by an arbitrary memory read from a controlled memory pointer, which can lead to a remote denial of...