CVE-2015-0536

Name of the Vulnerable Software and Affected Versions EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x through 4.0.7 EMC RSA BSAFE Micro Edition Suite (MES) versions 4.1.x through 4.1.2 RSA BSAFE SSL-C versions 2.8.9 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This occurs when client authentication and an ephemeral Diffie-Hellman ciphersuite are enabled, and a ClientKeyExchange message with a length of zero is sent.

Recommendations For EMC RSA BSAFE Micro Edition Suite (MES) versions 4.0.x through 4.0.7, update to version 4.0.8 or later. For EMC RSA BSAFE Micro Edition Suite (MES) versions 4.1.x through 4.1.2, update to version 4.1.3 or later. For RSA BSAFE SSL-C versions 2.8.9 and earlier, update to a version later than 2.8.9.