CVE-2018-11056

—

CVSS 3.1

6.5 medium

EPSS

2%p78

Published

Aug 31, 2018 (Aug 31, 2018)

Modified

Jun 17, 2026

Description

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.

Vendors: dell oracle
Products: bsafe, bsafe crypto-c, application testing suite, communications analytics, communications ip service activator, core rdbms, enterprise manager ops center, goldengate application adapters, jd edwards enterpriseone tools, real user experience insight, retail predictive application server, security service
Weakness: CWE-400
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (1.9%)

In the news0 stories

No ingested article mentions this CVE yet.