PT-2017-12708 · Gemalto · Sentinel Ldk Rte+3

Published 2017-10-03 · Updated 2018-05-11 · CVE-2017-12818

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products versions prior to 7.55

Description The issue is related to a stack overflow in a custom XML-parser, which can lead to a remote denial of service.

Recommendations For versions prior to 7.55, update to Sentinel LDK RTE version 7.55 or later to resolve the issue.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2017-12818

Affected Products

Hasp Srm

Sentinel Hasp

Sentinel Ldk

Sentinel Ldk Rte

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-12818 · Security Note
• https://osv.dev/vulnerability/CVE-2017-12818 · Vendor Advisory
• https://ics-cert.kaspersky.com/advisories/klcert-advisories/2017/10/02/klcert-17-004-sentinel-ldk-rte-stack-overflow-in-custom-xml-parser-leads-to-remote-denial-of-service · Note
• https://cert-portal.siemens.com/productcert/pdf/ssa-727467.pdf · Note
• https://ics-cert.us-cert.gov/advisories/ICSA-18-093-01 · Note
• http://securityfocus.com/bid/102906 · Note