CVE-2019-17359 in Data Integrator

Résumé

par MITRE

The ASN.1 parser in Bouncy Castle Crypto (aka BC Java) 1.63 can trigger a large attempted memory allocation, and resultant OutOfMemoryError error, via crafted ASN.1 data. This is fixed in 1.64.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Réserver: 08/10/2019
• Modérer: accepté
• Entrée: 16
• Relier: afficher
• CPE: prêt
• CWE: CWE-404 (confirmé)
• CVSS: 7.5 (NVD)
• EPSS: 0.08950
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2019-17359
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2019-17359
• CVE Details: https://www.cvedetails.com/cve/CVE-2019-17359/