CVE Vulnerabilities

CVE-2019-3733

Incomplete Cleanup

Published: Sep 30, 2019 | Modified: Apr 12, 2022
CVSS 3.x
4.9
MEDIUM
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
CVSS 2.x
4 MEDIUM
AV:N/AC:L/Au:S/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

RSA BSAFE Crypto-C Micro Edition, all versions prior to 4.1.4, is vulnerable to three (3) different Improper Clearing of Heap Memory Before Release vulnerability, also known as Heap Inspection vulnerability. A malicious remote user could potentially exploit this vulnerability to extract information leaving data at risk of exposure.

Weakness

The product does not properly “clean up” and remove temporary or supporting resources after they have been used.

Affected Software

Name Vendor Start Version End Version
Bsafe_crypto-c-micro-edition Dell 4.1 (including) 4.1.4 (excluding)
Rsa_bsafe_crypto-c Emc 4.0 (including) 4.0.5.3 (including)

Potential Mitigations

References