CVE-2019-3739

RSA BSAFE Crypto-J versions prior to 6.2.5 are vulnerable to Information Exposure Through Timing Discrepancy vulnerabilities during ECDSA key generation. A malicious remote attacker could potentially exploit those vulnerabilities to recover ECDSA keys.

• dell bsafe cert-j (<= 6.2.4) • dell bsafe crypto-j (< 6.2.5) • dell bsafe ssl-j (<= 6.2.4.1) • oracle application performance management 13.3.0.0 • oracle application performance management 13.4.0.0 • oracle communications network integrity 7.3.2 • oracle communications network integrity 7.3.5 • oracle communications network integrity 7.3.6 • oracle database 12.1.0.2 • oracle database 12.2.0.1 • oracle database 18c • oracle database 19c • oracle goldengate (< 19.1.0.0.0.210420) • oracle retail assortment planning 15.0.3.0 • oracle retail assortment planning 16.0.3.0 • oracle retail integration bus 14.1 • oracle retail integration bus 15.0 • oracle retail integration bus 16.0 • oracle retail predictive application server 14.1.3.0 • oracle retail predictive application server 15.0.3.0 • oracle retail predictive application server 16.0.3.0 • oracle retail service backbone 14.1 • oracle retail service backbone 15.0 • oracle retail service backbone 16.0 • oracle retail store inventory management 14.0.4 • oracle retail store inventory management 14.1.3 • oracle retail store inventory management 15.0.3 • oracle retail store inventory management 16.0.3 • oracle retail xstore point of service 15.0.3 • oracle retail xstore point of service 16.0.5 • oracle retail xstore point of service 17.0.3 • oracle retail xstore point of service 18.0.2 • oracle retail xstore point of service 19.0.1 • oracle storagetek acsls 8.5.1 • oracle storagetek tape analytics sw tool 2.3 • oracle weblogic server 10.3.6.0.0 • oracle weblogic server 12.2.1.3.0 • oracle weblogic server 12.2.1.4.0 • oracle weblogic server 14.1.1.0.0