CVE-2018-11070: Medium severity dell bsafe crypto-j vulnerability
RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4 contain a Covert Timing Channel vulnerability during PKCS #1 unpadding operations, also known as a Bleichenbacher attack. A remote attacker may be able to recover a RSA key.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-11070?
CVE-2018-11070 is considered a high severity vulnerability due to its potential to allow remote attackers to recover RSA keys.
How do I fix CVE-2018-11070?
To fix CVE-2018-11070, update to RSA BSAFE Crypto-J version 6.2.4 or higher and RSA BSAFE SSL-J version 6.2.4 or higher.
What types of software are affected by CVE-2018-11070?
CVE-2018-11070 affects RSA BSAFE Crypto-J versions prior to 6.2.4 and RSA BSAFE SSL-J versions prior to 6.2.4.
What kind of attack is associated with CVE-2018-11070?
CVE-2018-11070 is associated with a Covert Timing Channel vulnerability that can facilitate a Bleichenbacher attack.
Can CVE-2018-11070 be exploited remotely?
Yes, CVE-2018-11070 can be exploited remotely by attackers to recover an RSA key.