Quantum Secular Labs / Blog / Advisories

CVE-2018-11058: Dell Bsafe: Out-of-bounds Read

CVE-2018-11058 is rated critical with a CVSS v3.1 base score of 9.8 and affects Dell Bsafe, along with 11 other products in NVD’s configuration data. Per its scoring, it can be exploited over the network, without authentication, without any user interaction. The scored impact on confidentiality, integrity and availability is the highest available.

Vulnerability description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.

Severity breakdown

CVSS v3.1 9.8: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Attack vector: Network. Exploitable remotely over the network, with no need for local or physical access.
  • Attack complexity: Low. No special conditions; the attack can be repeated reliably.
  • Privileges required: None. No account or prior access is needed.
  • User interaction: None. No action from any user is needed.
  • Scope: Unchanged. Impact stays within the vulnerable component.
  • Confidentiality impact: High. Total loss of confidentiality; sensitive data can be fully disclosed.
  • Integrity impact: High. Total loss of integrity; data or system state can be fully modified.
  • Availability impact: High. Total loss of availability; the component can be shut down.

Underlying weakness

CWE-125: Out-of-bounds Read

The product reads data past the end, or before the beginning, of the intended buffer.

Affected products

  • Dell Bsafe: from 4.0.0 before 4.0.11; from 4.1.0 before 4.1.6
  • Dell Bsafe Crypto C: from 4.0.0 before 4.0.5.3
  • Oracle Application Testing Suite: 13.3.0.1
  • Oracle Communications Analytics: 12.1.1
  • Oracle Communications IP Service Activator: 7.3.0; 7.4.0
  • Oracle Core Rdbms: 11.2.0.4; 12.1.0.2; 12.2.0.1; 18c; 19c
  • Oracle Enterprise Manager Ops Center: 12.3.3; 12.4.0
  • Oracle Goldengate Application Adapters: 12.3.2.1.0
  • Oracle Jd Edwards Enterpriseone Tools: 9.2
  • Oracle Real User Experience Insight: 13.1.2.1; 13.2.3.1; 13.3.1.0
  • Oracle Retail Predictive Application Server: 15.0.3; 16.0.3.0
  • Oracle Security Service: 11.1.1.9.0; 12.1.3.0.0; 12.2.1.3.0
  • Oracle Timesten In Memory Database: before 18.1.4.1.0

References