CVE-2019-3728

Dell BSAFE Crypto-C Crypto-C and Micro Edition family (Crypto-C RSA 6.4; Crypto-C Micro Edition 4.x; Micro Edition Suite 4.x) are affected by CVE-2019-3728 due to an out-of-bounds read in ASN.1 decoding (_A_DecodeType/_A_DecodeElement) caused by integer overflow/underflow when parsing certain ASN...

CVE-2018-11058

CVE-2018-11058 affects RSA BSAFE Micro Edition Suite (4.0.x before 4.0.11; 4.1.x before 4.1.6) and RSA BSAFE Crypto-C Micro Edition (4.0.x before 4.0.5.3). The issue is a buffer over-read when parsing ASN.1 data, exploitable by remotely crafted ASN.1 input. Connected Nessus entries (e.g., Oracle ...

CVE-2015-0537

CVE-2015-0537 concerns an integer underflow in the base64-decoding path of EMC RSA BSAFE MES, RSA BSAFE Crypto-C ME, and RSA BSAFE SSL-C. The issue can trigger memory corruption or a segmentation fault, enabling denial of service or potentially other impact via crafted base64 data. Affected produ...

CVE-2018-11056

The CVE describes a DoS risk in Dell EMC RSA BSAFE Micro Edition Suite (MES) before 4.1.6.1 (4.1.x line) and RSA BSAFE Crypto-C Micro Edition before 4.0.5.3 (4.0.x line). The vulnerability is an Uncontrolled Resource Consumption (Resource Exhaustion) when parsing ASN.1 data, allowing a remote att...

CVE-2006-3894

The CVE-2006-3894 issue affects RSA BSAFE Crypto-C and Cert-C libraries (pre-6.3.1 and pre-2.8, respectively) used by Cisco and other products. The vulnerability stems from parsing malformed ASN.1 objects and can cause remote denial of service. Affected Cisco products include IOS, IOS XR, PIX/ASA...