Design/Logic Flaw

2018-08-3118:29:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

76.3%

JSON

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption (‘Resource Exhaustion’) vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.

CPENameOperatorVersion
bsafege4.1.0
bsafelt4.1.6.1
bsafe_crypto-cge4.0.0
bsafe_crypto-clt4.0.5.3
application_testing_suiteeq13.3.0.1
communications_analyticseq12.1.1
communications_ip_service_activatoreq7.4.0
communications_ip_service_activatoreq7.3.0
core_rdbmseq11.2.0.4
core_rdbmseq12.2.0.1

Name	Operator	Version
bsafe	ge	4.1.0
bsafe	lt	4.1.6.1
bsafe_crypto-c	ge	4.0.0
bsafe_crypto-c	lt	4.0.5.3
application_testing_suite	eq	13.3.0.1
communications_analytics	eq	12.1.1
communications_ip_service_activator	eq	7.4.0
communications_ip_service_activator	eq	7.3.0
core_rdbms	eq	11.2.0.4
core_rdbms	eq	12.2.0.1