7.5
High
CVE-2019-3728 RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro…
Description
RSA BSAFE Crypto-C Micro Edition versions from 4.0.0.0 before 4.0.5.4 and from 4.1.0 before 4.1.4, RSA BSAFE Micro Edition Suite versions from 4.0.0 before 4.0.13 and from 4.1.0 before 4.4 and RSA Crypto-C versions from 6.0.0 through 6.4.* are vulnerable to an out-of-bounds read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| RSA BSAFE Crypto-C Micro Edition 4.1 | 4.1.0 → < 4.1.4 | 4.1.4 |
| RSA BSAFE Crypto-C Micro Edition 4.0 | 4.0.0.0 → < 4.0.5.4 | 4.0.5.4 |
| RSA BSAFE Micro Edition Suite 4.1 | 4.1.0 → < 4.4 | 4.4 |
| RSA BSAFE Micro Edition Suite 4.0 | 4.0.0 → < 4.0.13 | 4.0.13 |
| RSA Crypto-C 6.0 | 6.0.0 → latest | No fix stated |
Other CVEs of RSA BSAFE Crypto-C Micro Edition
The 4 CVEs of RSA BSAFE Crypto-C Micro Edition →
CVE-2019-3731
RSA BSAFE Crypto-C Micro Edition versions prior to 4.1.4 and RSA Micro Edition Suite versions prior to 4.4 are…
5.9
Medium
CVE-2019-3732
RSA BSAFE Crypto-C Micro Edition, versions prior to 4.0.5.3 (in 4.0.x) and versions prior to 4.1.3.3 (in 4.1.x), and RSA…
5.9
Medium
CVE-2019-3733
RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of…
4.4
Medium