cve/2018/CVE-2018-11056.md

### [CVE-2018-11056](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11056)
![](https://img.shields.io/static/v1?label=Product&message=BSAFE%20Crypto-C%20Micro%20Edition&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=BSAFE%20Micro%20Edition%20Suite&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Uncontrolled%20Resource%20Consumption%20('Resource%20Exhaustion')%20vulnerability%20&color=brighgreen)

### Description

RSA BSAFE Micro Edition Suite, prior to 4.1.6.1 (in 4.1.x), and RSA BSAFE Crypto-C Micro Edition versions prior to 4.0.5.3 (in 4.0.x) contain an Uncontrolled Resource Consumption ('Resource Exhaustion') vulnerability when parsing ASN.1 data. A remote attacker could use maliciously constructed ASN.1 data that would exhaust the stack, potentially causing a Denial Of Service.

### POC

#### Reference
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpuapr2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujan2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpujul2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html
- https://www.oracle.com/security-alerts/cpuoct2020.html

#### Github
No PoCs found on GitHub currently.