CVE-2019-3728
Summary
| CVE | CVE-2019-3728 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-09-30 22:15:00 UTC |
| Updated | 2022-03-31 18:09:00 UTC |
| Description | RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.4 (in 4.0.x) and 4.1.4 (in 4.1.x) and RSA BSAFE Micro Edition Suite versions prior to 4.0.13 (in 4.0.x) and prior to 4.4 (in 4.1.x, 4.2.x, 4.3.x) are vulnerable to a Buffer Over-read vulnerability when processing DSA signature. A malicious remote user could potentially exploit this vulnerability to cause a crash in the library of the affected system. |
Risk And Classification
Problem Types: CWE-125
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Dell | Bsafe | All | All | All | All |
| Application | Dell | Bsafe Crypto-c | All | All | All | All |
| Application | Dell | Bsafe Crypto-c-micro-edition | All | All | All | All |
| Application | Dell | Bsafe Micro-edition-suite | All | All | All | All |
| Application | Emc | Rsa Bsafe | All | All | All | All |
| Application | Emc | Rsa Bsafe | All | All | All | All |
| Application | Emc | Rsa Bsafe Crypto-c | All | All | All | All |
| Application | Emc | Rsa Bsafe Crypto-c | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Access Denied | MISC | www.dell.com | |
| Access Denied | MISC | www.dell.com | Third Party Advisory |
| Access Denied | MITRE | www.dell.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.