CVE-2017-12820 Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Arbitrary memory read in Sentinel LDK allows remote attackers to cause a denial of service via controlled memory pointers.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2017-12820?
CVE-2017-12820 is a high-severity memory corruption vulnerability in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE, published on 3 Oct 2017. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 leads to remote denial of service.
Weakness: CWE-119
Which versions are affected by CVE-2017-12820?
It affects 1 product.
Products include Sentinel Sentinel Ldk Rte Firmware.
How do I fix CVE-2017-12820?
No fix has been published for CVE-2017-12820 yet. Limit exposure of the affected software until one is available.
Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.
Is CVE-2017-12820 being exploited?
There is no known exploitation of CVE-2017-12820 in the wild and no public exploit code.
Other vulnerabilities in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
- CVE-2017-12822 Missing authorization in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
- CVE-2017-12819 Auth bypass in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
- CVE-2017-12821 Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote code execution.
- CVE-2017-12818 Denial of service in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE
Sources
Also known as GHSA-m534-2jxx-fvmm.