high7.5
CVE-2019-3728
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0…
Impact
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dell | Bsafe Crypto-C | from 6.0.0 through 6.4 |
| Dell | Bsafe Crypto-C-Micro-Edition | from 4.0.0 before 4.0.5.4 from 4.1.0 before 4.1.4 |
| Dell | Bsafe Micro-Edition-Suite | from 4.0.0 before 4.0.13 from 4.1.0 before 4.4.0 |