CVE-2018-15769 - CVE House
Back to Database
Status published High CVE-2018-15769

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in...

Vulnerability Description

RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-15769

Credits & Attribution

No credits recorded in the NVD database.

References

More from dell

View All →
CVE-2019-19620
In SecureWorks Red Cloak Windows Agent before 2.0.7.9, a local...
Low 3.3
CVE-2018-1207
Dell EMC iDRAC7/iDRAC8, versions prior to 2.52.52.52, contain CGI injection...
Critical 9.8
CVE-2018-15748
On Dell 2335dn printers with Printer Firmware Version 2.70.05.02, Engine...
High 8.8
CVE-2017-2802
An exploitable dll hijacking vulnerability exists in the poaService.exe service...
High 7.8
CVE-2016-9684
The SonicWall Secure Remote Access server (version 8.1.0.2-14sv) is vulnerable...
Critical 9.8

Affected Vendor

Affected Software

bsafe, application testing suite, communications analytics, communications ip service activator, core rdbms, enterprise manager ops center, goldengate application adapters, jd edwards enterpriseone tools, real user experience insight, retail predictive application server, security service, timesten in-memory database
Vulnerable Versions:
4.0.0, 4.1.0, 13.3.0.1, 12.1.1, 7.3.0, 7.4.0, 11.2.0.4, 12.1.0.2, 12.2.0.1, 18c, 19c, 12.3.3, 12.4.0, 12.3.2.1.0, 9.2, 13.1.2.1, 13.2.3.1, 13.3.1.0, 15.0.3, 16.0.3.0, 11.1.1.9.0, 12.1.3.0.0, 12.2.1.3.0, 0

Timeline

Official Publish: November 16th, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.