Medium severity5.9NVD Advisory· Published Aug 31, 2018· Updated Jun 17, 2026

CVE-2018-11057

Description

RSA BSAFE Micro Edition Suite, versions prior to 4.0.11 (in 4.0.x) and prior to 4.1.6.1 (in 4.1.x) contains a Covert Timing Channel vulnerability during RSA decryption, also known as a Bleichenbacher attack on RSA decryption. A remote attacker may be able to recover a RSA key.

Affected products

Rsa/BSAFE Micro Edition Suitellm-fuzzy
Range: <4.0.11 (4.0.x) / <4.1.6.1 (4.1.x)
RSA/BSAFE Micro Edition Suitev5
Range: unspecified

Patches

Vulnerability mechanics

References

www.oracle.com/security-alerts/cpuapr2020.htmlnvdPatchThird Party Advisory
www.oracle.com/security-alerts/cpujan2020.htmlnvdPatchThird Party Advisory
www.oracle.com/security-alerts/cpujul2020.htmlnvdPatchThird Party Advisory
www.oracle.com/security-alerts/cpuoct2020.htmlnvdPatchThird Party Advisory
www.oracle.com/technetwork/security-advisory/cpujul2019-5072835.htmlnvdPatchThird Party Advisory
seclists.org/fulldisclosure/2018/Aug/46nvdMailing ListThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.384
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000