CVE-2018-11054

High

Description

RSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.

SeverityHigh
CVSS7.5
Exploit probability—
ProductDell Bsafe
PublishedAug 31, 2018
First seenAug 31, 2018

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
dell bsafe4.1.6—
oracle application_testing_suite13.3.0.1—
oracle communications_analytics12.1.1—
oracle communications_ip_service_activator7.3.4, 7.4.0—
oracle core_rdbms11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c—
oracle enterprise_manager_ops_center12.3.3, 12.4.0—
oracle goldengate_application_adapters12.3.2.1.0—
oracle jd_edwards_enterpriseone_tools9.2—
oracle real_user_experience_insight13.1.2.1, 13.2.3.1, 13.3.1.0—
oracle retail_predictive_application_server15.0.3, 16.0.3—
oracle security_service11.1.1.9.0, 12.1.3.0.0, 12.2.1.2.0—
oracle timesten_in-memory_databasev ≤ 18.1.4.1.0—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.