7.5
CVE-2018-11054
- EPSS 3.24%
- Veröffentlicht 31.08.2018 18:29:00
- Zuletzt bearbeitet 21.11.2024 03:42:34
- Erkennungen
LoginRSA BSAFE Micro Edition Suite, version 4.1.6, contains an integer overflow vulnerability. A remote attacker could use maliciously constructed ASN.1 data to potentially cause a Denial Of Service.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Oracle ≫ Application Testing Suite Version 13.3.0.1
Oracle ≫ Communications Analytics Version 12.1.1
Oracle ≫ Communications Ip Service Activator Version 7.3.4
Oracle ≫ Communications Ip Service Activator Version 7.4.0
Oracle ≫ Core Rdbms Version 11.2.0.4
Oracle ≫ Core Rdbms Version 12.1.0.2
Oracle ≫ Core Rdbms Version 12.2.0.1
Oracle ≫ Core Rdbms Version 18c
Oracle ≫ Core Rdbms Version 19c
Oracle ≫ Enterprise Manager Ops Center Version 12.3.3
Oracle ≫ Enterprise Manager Ops Center Version 12.4.0
Oracle ≫ Goldengate Application Adapters Version 12.3.2.1.0
Oracle ≫ Jd Edwards Enterpriseone Tools Version 9.2
Oracle ≫ Real User Experience Insight Version 13.1.2.1
Oracle ≫ Real User Experience Insight Version 13.2.3.1
Oracle ≫ Real User Experience Insight Version 13.3.1.0
Oracle ≫ Retail Predictive Application Server Version 15.0.3
Oracle ≫ Retail Predictive Application Server Version 16.0.3
Oracle ≫ Security Service Version 11.1.1.9.0
Oracle ≫ Security Service Version 12.1.3.0.0
Oracle ≫ Security Service Version 12.2.1.2.0
Oracle ≫ Timesten In-memory Database Version <= 18.1.4.1.0
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 3.24% | 0.867 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| NIST | 7.5 | 3.9 | 3.6 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
| NIST | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
| EMC | 7.5 | 3.9 | 3.6 |
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
|
CWE-190 Integer Overflow or Wraparound
The product performs a calculation that can produce an integer overflow or wraparound when the logic assumes that the resulting value will always be larger than the original value. This occurs when an integer value is incremented to a value that is too large to store in the associated representation. When this occurs, the value may become a very small or negative number.
https://www.oracle.com/security-alerts/cpujan2020.html
https://www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.html
https://www.oracle.com/security-alerts/cpuapr2020.html
https://www.oracle.com/security-alerts/cpujul2020.html
https://www.oracle.com/security-alerts/cpuoct2020.html
http://seclists.org/fulldisclosure/2018/Aug/46