CVSS 3.1
6.5 mediumCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:HCVE-2018-11056
RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.
Severity
- EPSS
- 1.9% chance of exploitation in the next 30 days; higher than 79% of CVEs (scores of 2026-10-31)
- CWE
- CWE-400
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:bsafe
- dell:bsafe_crypto-c
- oracle:application_testing_suite
- oracle:communications_analytics
- oracle:communications_ip_service_activator
- oracle:core_rdbms
- oracle:enterprise_manager_ops_center
- oracle:goldengate_application_adapters
- oracle:jd_edwards_enterpriseone_tools
- oracle:real_user_experience_insight
- oracle:retail_predictive_application_server
- oracle:security_service
- oracle:timesten_in-memory_database