CVE-2019-3732

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

Information disclosure

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of...

Heap overflow

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

Heap overflow

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

Information disclosure

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

Buffer overflow

RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 in 4.0.x and 4.1.4 in 4.1.x and RSA BSAFE Micro Edition Suite versions prior to 4.0.13 in 4.0.x and prior to 4.4 in 4.1.x, 4.2.x, 4.3.x are vulnerable to a Buffer Over-read vulnerability when processing DSA signature. A malicious remote...

CVE-2019-3733

The vulnerability CVE-2019-3733 affects RSA BSAFE Crypto-C Micro Edition all versions before 4.1.4, due to three Improper Clearing of Heap Memory Before Release (Heap Inspection) issues. This could allow a remote attacker to extract sensitive data left in memory. Mitigation: upgrade to 4.1.4 or l...

CVE-2019-3728

Dell BSAFE Crypto-C Crypto-C and Micro Edition family (Crypto-C RSA 6.4; Crypto-C Micro Edition 4.x; Micro Edition Suite 4.x) are affected by CVE-2019-3728 due to an out-of-bounds read in ASN.1 decoding (_A_DecodeType/_A_DecodeElement) caused by integer overflow/underflow when parsing certain ASN...

CVE-2019-3731

The CVE-2019-3731 entry affects Dell RSA BSAFE Crypto-C Micro Edition and RSA Micro Edition Suite. Affected versions are Crypto-C Micro Edition before 4.1.4 and Micro Edition Suite before 4.4. The issue is an Information Disclosure Through Timing Discrepancy, enabling a remote attacker to potenti...

CVE-2019-3732

CVE-2019-3732 affects Dell RSA BSAFE Crypto-C Micro Edition (pre-4.0.5.3 in 4.0.x and pre-4.1.3.3 in 4.1.x) and Dell RSA BSAFE Micro Edition Suite (pre-4.0.11 in 4.0.x, pre-4.1.6.1 in 4.1.x, pre-4.3.3 in 4.2.x/4.3.x). The vulnerability is an Information Disclosure Through Timing Discrepancy, allo...

CVE-2019-3729

The vulnerability CVE-2019-3729 affects RSA BSAFE Micro Edition Suite versions prior to 4.4 (4.0.x, 4.1.x, 4.2.x, 4.3.x). The issue is a heap-based buffer overflow that occurs when parsing an ECDSA signature, which an adjacent-network attacker could potentially exploit to cause a crash in the aff...

CVE-2019-3730

RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 in 4.1.x and prior to 4.4 in 4.2.x and 4.3.x, are vulnerable to an Information Exposure Through an Error Message vulnerability, also known as a “padding oracle attack vulnerability”. A malicious remote user could potentially exploit this...

CVE-2019-3732

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

CVE-2019-3731

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of...

CVE-2019-3730

Dell RSA BSAFE Micro Edition Suite versions prior to 4.1.6.3 (in 4.1.x) and prior to 4.4 (in 4.2.x and 4.3.x) are affected by an Information Exposure Through an Error Message vulnerability (padding oracle). A remote attacker could potentially exploit this to extract sensitive information, per CVE...

CVE-2019-3733

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

CVE-2019-3729

RSA BSAFE Micro Edition Suite versions prior to 4.4 in 4.0.x, 4.1.x, 4.2.x and 4.3.x are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the librar...

The vulnerabilities of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools, as well as the Oracle Database Server database management system and the Oracle Fusion Middleware software platform, are caused by an operation that goes beyond the buffer boundaries in memory. This allows a malicious actor to execute arbitrary code in the context of the current user.

The vulnerabilities of the RSA BSAFE Micro Edition Suite and BSAFE Crypto-C Micro Edition security tools, as well as the Oracle Database Server database management system and the Oracle Fusion Middleware software platform, are due to the execution of operations outside of the buffer in memory...

CVE-2018-15769

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 in 4.0.x series and versions prior to 4.1.6.2 in 4.1.x series contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service DoS on TLS clients during the handshake when a very large prime value is se...

Code injection

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 in 4.0.x series and versions prior to 4.1.6.2 in 4.1.x series contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service DoS on TLS clients during the handshake when a very large prime value is se...