ZeroHour
DashboardNewsCVEsExploitsIncidentsAIBriefAnalyticsEntitiesWatchlistIOCsAsk the feedSourcesFeeds & APIKiosk mode

CVE-2018-15769

—
CVSS 3.1
7.5 high
EPSS
3%p85
Published
()
Modified
Description

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.

Vendors
delloracle
Products
bsafe, application testing suite, communications analytics, communications ip service activator, core rdbms, enterprise manager ops center, goldengate application adapters, jd edwards enterpriseone tools, real user experience insight, retail predictive application server, security service, timesten in-memory database
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
NVD CVE.org GitHub PoCs EPSS (2.6%)

In the news

No ingested article mentions this CVE yet.