CVE-2018-1232: Buffer Overflow
RSA Authentication Agent version 8.0.1 and earlier for Web for both IIS and Apache Web Server are impacted by a stack-based buffer overflow which may occur when handling certain malicious web cookies that have invalid formats. The attacker could exploit this vulnerability to crash the authentication agent and cause a denial-of-service situation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-1232?
CVE-2018-1232 has a high severity level due to its potential to allow attackers to exploit a buffer overflow.
How do I fix CVE-2018-1232?
To fix CVE-2018-1232, upgrade the RSA Authentication Agent for Web to version 8.0.2 or later.
What systems are affected by CVE-2018-1232?
CVE-2018-1232 affects RSA Authentication Agent for Web versions 8.0.1 and earlier running on IIS and Apache Web Servers.
What type of vulnerability is CVE-2018-1232?
CVE-2018-1232 is classified as a stack-based buffer overflow vulnerability.
Can CVE-2018-1232 lead to a denial of service?
Yes, CVE-2018-1232 can be exploited to crash the authentication service, leading to a denial of service.