TI-2015-00497 Aliases CVE-2015-0537 GHSA-45w8-hp4w-6fr6

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition…

MEDIUM 47CWE-191Published 2015-08-20 · Updated 2024-08-06

Key facts

Attack vector: Network
Privileges required: None
User interaction: None
Attack complexity: Low
Impact type: Code execution
Confidentiality · integrity · availability: High · High · High
Fix status: No fix listed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-191 and the CVSS impact.

Summary

Integer underflow in the base64-decoding implementation in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA BSAFE Crypto-C Micro Edition (Crypto-C ME) before 4.0.4 and 4.1, and RSA BSAFE SSL-C 2.8.9 and earlier allows remote attackers to cause a denial of service (memory corruption or segmentation fault) or possibly have unspecified other impact via crafted base64 data, a similar issue to CVE-2015-0292.

Why it matters now

EPSS 0.02644 85th percentileScored 2026-11-07

Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
—	—	all versions	—	No fix listed	CNA

— Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 3

CPE	Versions	Role	Vendor
cpe:2.3:a:dell:bsafe:::::micro_edition_suite:::*	4.0.0 to before 4.0.8; 4.1.0 to before 4.1.3	Vulnerable	Dell
cpe:2.3:a:dell:bsafe_crypto-c:::::micro_edition:::*	before 4.0.4	Vulnerable	Dell
cpe:2.3:a:dell:bsafe_ssl-c::::::::	up to 2.8.9	Vulnerable	Dell

cpe:2.3:a:dell:bsafe:*:*:*:*:micro_edition_suite:*:*:* Versions 4.0.0 to before 4.0.8; 4.1.0 to before 4.1.3 Vulnerable ·Dell
cpe:2.3:a:dell:bsafe_crypto-c:*:*:*:*:micro_edition:*:*:* Versions before 4.0.4 Vulnerable ·Dell
cpe:2.3:a:dell:bsafe_ssl-c:*:*:*:*:*:*:*:* Versions up to 2.8.9 Vulnerable ·Dell

Remediation

No fixed version listed by the sources yet.

Timeline

2026-10-02 Threatist record created from CVE-2015-0537
2026-10-03 Alias added: GHSA-45w8-hp4w-6fr6

References

Advisory 1

20150817 ESA-2015-081: RSA BSAFE Micro Edition Suite, Crypto-C Micro Edition, Crypto-J, SSL-J and SSL-C Multiple Vulnerabilities

TI-2018-07844 Out-of-bounds read in RSA BSAFE Micro Edition Suite CVSS 3.1CRITICAL 9.8
TI-2018-07840 Integer overflow in RSA BSAFE Micro Edition Suite CVSS 3.1HIGH 7.5
TI-2018-11248 RSA BSAFE Micro Edition Suite versions prior to 4.0.11 (in 4.0.x series) and versions… CVSS 3.1HIGH 7.5
TI-2015-00496 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3 and RSA… CVSS 3.1HIGH 7.5
TI-2016-00832 The client in EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.9 and 4.1.x before… CVSS 3.1HIGH 7.5
TI-2015-00494 EMC RSA BSAFE Micro Edition Suite (MES) 4.0.x before 4.0.8 and 4.1.x before 4.1.3, RSA… CVSS 3.1HIGH 7.5

See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences