Skip to content
Not rated

CVE-2019-3955 Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the…

Description

Dameware Remote Mini Control version 12.1.0.34 and prior contains a unauthenticated remote heap overflow due to the server not properly validating RsaPubKeyLen during key negotiation. An unauthenticated remote attacker can cause a heap buffer overflow by specifying a large RsaPubKeyLen, which could cause a denial of service.

Affected products and versions

Product Affected versions Fixed in
Solarwinds Dameware Remote Mini Controller Versions not published
The 3 CVEs of Solarwinds Dameware Remote Mini Controller →
Track this CVE