PT-2019-16677 · Rsa · Rsa Bsafe Crypto-C Micro Edition

Published 2019-09-30 · Updated 2022-04-12 · CVE-2019-3733

Positive Technologies (AI Summary)

CVSS v3.1

4.9

Medium

Base vector

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4

Description The issue is related to an Improper Clearing of Heap Memory Before Release vulnerability, also known as 'Heap Inspection vulnerability'. This could allow a malicious remote user to extract information, putting data at risk of exposure.

Recommendations For versions prior to 4.1.4, update to version 4.1.4 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive data until the update is applied.

Fix

Weakness Enumeration

CWE-316

CWE-459

Related Identifiers

CVE-2019-3733

Affected Products

Rsa Bsafe Crypto-C Micro Edition

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-3733 · Security Note
• https://dell.com/support/kbdoc/000194054 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-3733 · Vendor Advisory
• https://t.me/cvenotify/24471 · Telegram Post
• https://t.me/cvenotify/23978 · Telegram Post