Approved changes feed: RSS · Atom

cpe:2.3:a:dell:bsafe:*:*:*:*:micro_edition_suite:*:*:*

part: a version: * update: *

VendorDell (dd4951dd-3d72-5089-9da1-f25e0dc3cae3)
ProductBsafe (72032353-2640-5eb4-a263-7fa718f3d17a)
Edition*
Language*
Software editionmicro_edition_suite
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-15769 vulnerable 2026-06-08 05:11:03.565569 Details available
RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions prior to 4.1.6.2 (in 4.1.x series) contain a key management error issue. A malicious TLS server could potentially cause a Denial Of Service (DoS) on TLS clients during the handshake when a very large prime value is sent to the TLS client, and an Ephemeral or Anonymous Diffie-Hellman cipher suite (DHE or ADH) is used.
Published: 2018-11-16T21:00:00.000Z
Updated: 2024-08-05T10:01:54.559Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11058 vulnerable 2026-06-08 05:10:37.784905 Details available
HIGH (7.5)
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition, version prior to 4.0.5.3 (in 4.0.x) contain a Buffer Over-Read vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would result in such issue.
Published: 2018-09-14T20:00:00.000Z
Updated: 2024-08-05T07:54:36.479Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11057 vulnerable 2026-06-08 05:10:37.778605 Details available
MEDIUM (5.9)
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.
Published: 2018-08-31T18:00:00.000Z
Updated: 2024-08-05T07:54:36.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11056 vulnerable 2026-06-08 05:10:37.776274 Details available
MEDIUM (6.5)
RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.
Published: 2018-08-31T18:00:00.000Z
Updated: 2024-08-05T07:54:36.548Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-11055 vulnerable 2026-06-08 05:10:37.767373 Details available
MEDIUM (4.4)
RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x), contains an Improper Clearing of Heap Memory Before Release ('Heap Inspection') vulnerability. Decoded PKCS #12 data in heap memory is not zeroized by MES before releasing the memory internally and a malicious local user could gain access to the unauthorized data by doing heap inspection.
Published: 2018-08-31T18:00:00.000Z
Updated: 2024-08-05T07:54:36.580Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-0923 vulnerable 2026-06-08 05:07:16.561781 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0537 vulnerable 2026-06-08 05:06:21.715778 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0536 vulnerable 2026-06-08 05:06:21.715386 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0535 vulnerable 2026-06-08 05:06:21.715021 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0534 vulnerable 2026-06-08 05:06:21.713226 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-0533 vulnerable 2026-06-08 05:06:21.712007 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.