PT-2018-3351 · Rsa+1 · Emc Rsa Bsafe Micro Edition Suite+4
Publicado
2018-08-31
·
Atualizado
2022-04-18
·
CVE-2018-11054
CVSS v2.0
7.8
Alta
| Vetor | AV:N/AC:L/Au:N/C:N/I:N/A:C |
Name of the Vulnerable Software and Affected Versions:
RSA BSAFE Micro Edition Suite version 4.1.6
Oracle Security Service (affected versions not specified)
Oracle Database Server (affected versions not specified)
Oracle Communications IP Service Activator (affected versions not specified)
Enterprise Manager Ops Center (affected versions not specified)
Description:
The issue is caused by an integer overflow vulnerability. A remote attacker could potentially use maliciously constructed ASN.1 data to cause a Denial Of Service. The vulnerability affects multiple software products, including RSA BSAFE Micro Edition Suite and various Oracle products.
Recommendations:
For RSA BSAFE Micro Edition Suite version 4.1.6, update to a version that fixes the integer overflow vulnerability.
For Oracle Security Service, apply the recommended configuration changes or patches to mitigate the issue.
For Oracle Database Server, restrict access to the affected components until a patch is available.
For Oracle Communications IP Service Activator, consider disabling the vulnerable functionality until an update is released.
For Enterprise Manager Ops Center, avoid using the affected features until a fix is provided.
At the moment, there is no information about a newer version that contains a fix for this vulnerability in some of the affected products.
Correção
DoS
Integer Overflow
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Enterprise Manager Ops Center
Oracle Communications Ip Service Activator
Oracle Database Server
Oracle Security Service
Emc Rsa Bsafe Micro Edition Suite