PT-2017-12708 · Gemalto · Sentinel Ldk Rte+3

Publicado 2017-10-03 · Atualizado 2018-05-11 · CVE-2017-12818

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products versions prior to 7.55

Description The issue is related to a stack overflow in a custom XML-parser, which can lead to a remote denial of service.

Recommendations For versions prior to 7.55, update to Sentinel LDK RTE version 7.55 or later to resolve the issue.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-12818

Produtos afetados

Hasp Srm

Sentinel Hasp

Sentinel Ldk

Sentinel Ldk Rte

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-12818 · Nota de Segurança
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service · Nota
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf · Nota
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 · Nota
• http://securityfocus.com/bid/102906 · Nota
• https://osv.dev/vulnerability/CVE-2017-12818 · Aviso do Fabricante