CVEvulnerability

CVE-2019-3729

2.4 LOW Published 2019-09-30 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2019-09-30
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
2.4 LOW — CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 3.0 ([email protected])
2.4 LOW — CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS 2.0 ([email protected])
2.7 LOW — AV:A/AC:L/Au:S/C:N/I:N/A:P
Weaknesses
CWE-121, CWE-787

Description

RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the library of the affected system.

Affected configurations

• dell bsafe micro-edition-suite (>= 4.0.0 < 4.0.13) • dell bsafe micro-edition-suite (>= 4.1.0 < 4.4.0)

Related

Weakness · CWE (2)

  • CWE-121 Stack-based Buffer Overflow weakness
  • CWE-787 Out-of-bounds Write weakness

References