CVE-2015-0537 Integer overflow in n/a
Remote attackers can cause denial of service or potential code execution via crafted base64 data due to an integer underflow in RSA BSAFE libraries.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2015-0537?
CVE-2015-0537 is a critical vulnerability in n/a, published on 20 Aug 2015. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.
Weakness: CWE-191
Which versions are affected by CVE-2015-0537?
It affects 3 products.
Products include Dell Bsafe, Dell Bsafe Crypto-C, Dell Bsafe Ssl-C.
How do I fix CVE-2015-0537?
No fix has been published for CVE-2015-0537 yet. Limit exposure of the affected software until one is available.
Is CVE-2015-0537 being exploited?
There is no known exploitation of CVE-2015-0537 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-45w8-hp4w-6fr6.