CVE-2019-3731

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of...

CVE-2019-3733

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

Buffer overflow

RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 in 4.0.x and 4.1.4 in 4.1.x and RSA BSAFE Micro Edition Suite versions prior to 4.0.13 in 4.0.x and prior to 4.4 in 4.1.x, 4.2.x, 4.3.x are vulnerable to a Buffer Over-read vulnerability when processing DSA signature. A malicious remote...

Heap overflow

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

CVE-2019-3728

Dell BSAFE Crypto-C Crypto-C and Micro Edition family (Crypto-C RSA 6.4; Crypto-C Micro Edition 4.x; Micro Edition Suite 4.x) are affected by CVE-2019-3728 due to an out-of-bounds read in ASN.1 decoding (_A_DecodeType/_A_DecodeElement) caused by integer overflow/underflow when parsing certain ASN...

CVE-2019-3733

The vulnerability CVE-2019-3733 affects RSA BSAFE Crypto-C Micro Edition all versions before 4.1.4, due to three Improper Clearing of Heap Memory Before Release (Heap Inspection) issues. This could allow a remote attacker to extract sensitive data left in memory. Mitigation: upgrade to 4.1.4 or l...

CVE-2019-3733

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

PT-2019-16672

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 RSA BSAFE Crypto-C Micro Edition version 4.1.4 RSA BSAFE Micro Edition Suite versions prior to 4.0.13 RSA BSAFE Micro Edition Suite versions prior to 4.4 Description The issue is relat...

PT-2019-16675

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 RSA Micro Edition Suite versions prior to 4.4 Description The issue is related to an Information Exposure Through Timing Discrepancy, which could be exploited by a malicious remote user ...

PT-2019-16676

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.3.3 RSA Micro Edition Suite versions prior to 4.0.11 RSA Micro Edition Suite versions prior to 4.1.6.1 RSA Micro Edition Suite...

PT-2019-16677

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 Description The issue is related to an Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. This could allow a malicious remote...

CVE-2019-3732: Covert Timing Channel

RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 in 4.0.x and versions prior to 4.1.3.3 in 4.1.x, and RSA Micro Edition Suite, versions prior to 4.0.11 in 4.0.x versions prior to 4.1.6.1 in 4.1.x and versions prior to 4.3.3 4.2.x and 4.3.x are vulnerable to an Information Exposure...

CVE-2019-3728: Out-of-bounds Read

RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4. are vulnerable to an out-of-bounds read vulnerability when...

CVE-2019-3733: Cleartext Storage of Sensitive Information in Memory

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three 3 different Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. A malicious remote user could potentially exploit this vulnerability to extract informati...

CVE-2019-3731: Observable Discrepancy

RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are vulnerable to an Information Exposure Through Timing Discrepancy. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of...

CVE-2018-11058: Out-of-bounds Read

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 in 4.0.x and prior to 4.1.6 in 4.1.x, and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 in 4.0.x contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data th...

CVE-2018-11056: Uncontrolled Resource Consumption

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 in 4.1.x, and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 in 4.0.x contain an Uncontrolled Resource Consumption 'Resource Exhaustion' vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 dat...

PT-2018-3353

Name of the Vulnerable Software and Affected Versions: RSA BSAFE Micro Edition Suite versions prior to 4.1.6.1 RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 Oracle Database Server affected versions not specified Oracle Communications IP Service Activator affected versions not specifi...

PT-2018-2951

Name of the Vulnerable Software and Affected Versions RSA BSAFE Micro Edition Suite versions prior to 4.0.11 RSA BSAFE Micro Edition Suite versions prior to 4.1.6 RSA BSAFE Crypto-C Micro Edition version prior to 4.0.5.3 Description The issue is caused by a Buffer Over-Read vulnerability when...

PT-2016-4444

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite MES versions 4.0.x through 4.1.x before 4.1.5 RSA BSAFE Crypto-C Micro Edition CCME versions 4.0.x through 4.1.x before 4.1.3 RSA BSAFE Crypto-J versions prior to 6.2.1 RSA BSAFE SSL-J versions prior to 6.2.1...