CVE-2015-0537

Critical

Published: 20/08/2015(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

An integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite before version 4.0.8 and 4.1.x before 4.1.3 allows remote attackers to cause a denial of service via crafted base64 data.

Risk Assessment

Attackers can exploit this vulnerability to cause memory corruption or segmentation faults, potentially leading to service disruption.

Recommendation

It is recommended to upgrade to the latest versions of the software to mitigate this vulnerability.

Original NVD description (English source)

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.