CVSS 3.1
9.8 criticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2018-11058
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
Severity
- EPSS
- 4.0% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- CWE
- CWE-125
- Published
- Modified
- Record from
- the NVD, synced
Affected
- dell:bsafe
- dell:bsafe_crypto-c
- oracle:application_testing_suite
- oracle:communications_analytics
- oracle:communications_ip_service_activator
- oracle:core_rdbms
- oracle:enterprise_manager_ops_center
- oracle:goldengate_application_adapters
- oracle:jd_edwards_enterpriseone_tools
- oracle:real_user_experience_insight
- oracle:retail_predictive_application_server
- oracle:security_service
- oracle:timesten_in-memory_database