CVE-2019-3729CWE-121

RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when…

Low · published September 30, 2019

CVSS v3.0
2.4
EPSS
0%
Percentile
33.0
In the wild
Unconfirmed
What it is

RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when parsing ECDSA signature. A malicious user with adjacent network access could potentially exploit this vulnerability to cause a crash in the library of the affected system.

The record
Technical detail
CVSS v3.0
2.4 · LOW
Vector
CVSS:3.0/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00399 · 33.0th percentile
Weakness
CWE-121 · Stack-based Buffer Overflow
Published
2019-09-30T21:48Z
EPSS history
Timeline
  • 30 SEP 21:48Z
    RSA BSAFE Micro Edition Suite versions prior to 4.4 (in 4.0.x, 4.1.x, 4.2.x and 4.3.x) are vulnerable to a Heap-based Buffer Overflow vulnerability when…
    cvelistv5