CVE-2018-15769 - 漏洞详情

CVE-2018-15769 (CNNVD-201811-331)

HIGH

中文标题:

Dell EMC RSA BSAFE Micro Edition Suite 加密问题漏洞

英文标题:

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6...

CVSS分数: 7.5

发布时间: 2018-11-16 21:00:00

漏洞类型: 加密问题

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Dell EMC RSA BSAFE Micro Edition Suite（MES）是美国戴尔（Dell）公司的一套加密工具包。该工具包可帮助开发人员实现稳定、安全的应用程序设计。 Dell MES 4.1.6.2之前的4.1.x版本和4.0.11之前的4.0.x版本中存在安全漏洞。攻击者可借助恶意的TLS服务器利用该漏洞造成拒绝服务（服务崩溃）。

英文描述:

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.

CWE类型:

（暂无数据）

受影响产品

厂商	产品	版本	版本范围	平台	CPE
dell	bsafe	*	-	-	`cpe:2.3:a:dell:bsafe:::::micro_edition_suite:::*`
oracle	application_testing_suite	13.3.0.1	-	-	`cpe:2.3:a:oracle:application_testing_suite:13.3.0.1:::::::*`
oracle	communications_analytics	12.1.1	-	-	`cpe:2.3:a:oracle:communications_analytics:12.1.1:::::::*`
oracle	communications_ip_service_activator	7.3.0	-	-	`cpe:2.3:a:oracle:communications_ip_service_activator:7.3.0:::::::*`
oracle	communications_ip_service_activator	7.4.0	-	-	`cpe:2.3:a:oracle:communications_ip_service_activator:7.4.0:::::::*`
oracle	core_rdbms	11.2.0.4	-	-	`cpe:2.3:a:oracle:core_rdbms:11.2.0.4:::::::*`
oracle	core_rdbms	12.1.0.2	-	-	`cpe:2.3:a:oracle:core_rdbms:12.1.0.2:::::::*`
oracle	core_rdbms	12.2.0.1	-	-	`cpe:2.3:a:oracle:core_rdbms:12.2.0.1:::::::*`
oracle	core_rdbms	18c	-	-	`cpe:2.3:a:oracle:core_rdbms:18c:::::::*`
oracle	core_rdbms	19c	-	-	`cpe:2.3:a:oracle:core_rdbms:19c:::::::*`
oracle	enterprise_manager_ops_center	12.3.3	-	-	`cpe:2.3:a:oracle:enterprise_manager_ops_center:12.3.3:::::::*`
oracle	enterprise_manager_ops_center	12.4.0	-	-	`cpe:2.3:a:oracle:enterprise_manager_ops_center:12.4.0:::::::*`
oracle	goldengate_application_adapters	12.3.2.1.0	-	-	`cpe:2.3:a:oracle:goldengate_application_adapters:12.3.2.1.0:::::::*`
oracle	jd_edwards_enterpriseone_tools	9.2	-	-	`cpe:2.3:a:oracle:jd_edwards_enterpriseone_tools:9.2:::::::*`
oracle	real_user_experience_insight	13.1.2.1	-	-	`cpe:2.3:a:oracle:real_user_experience_insight:13.1.2.1:::::::*`
oracle	real_user_experience_insight	13.2.3.1	-	-	`cpe:2.3:a:oracle:real_user_experience_insight:13.2.3.1:::::::*`
oracle	real_user_experience_insight	13.3.1.0	-	-	`cpe:2.3:a:oracle:real_user_experience_insight:13.3.1.0:::::::*`
oracle	retail_predictive_application_server	15.0.3	-	-	`cpe:2.3:a:oracle:retail_predictive_application_server:15.0.3:::::::*`
oracle	retail_predictive_application_server	16.0.3.0	-	-	`cpe:2.3:a:oracle:retail_predictive_application_server:16.0.3.0:::::::*`
oracle	security_service	11.1.1.9.0	-	-	`cpe:2.3:a:oracle:security_service:11.1.1.9.0:::::::*`
oracle	security_service	12.1.3.0.0	-	-	`cpe:2.3:a:oracle:security_service:12.1.3.0.0:::::::*`
oracle	security_service	12.2.1.3.0	-	-	`cpe:2.3:a:oracle:security_service:12.2.1.3.0:::::::*`
oracle	timesten_in-memory_database	*	-	-	`cpe:2.3:a:oracle:timesten_in-memory_database::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）

临时解决方案:

（暂无数据）

参考链接

105929 vdb-entry
cve.org

访问

20181112 DSA-2018-198: RSA BSAFE Micro Edition Suite Key Management Error Vulnerability mailing-list
cve.org

访问

1042057 vdb-entry
cve.org

访问