The vulnerability of the Network Security Services library allows a perpetrator to cause a service failure or exert other effects.

🗓️ 18 Aug 2017 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

NSS vulnerability causes failure via out-of-bounds write from misdecoded Base64 data with a crafted certificate.

Reporter	Title	Published	Views	Family All 173
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM Storwize V7000 Unified	18 Jun 201800:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in coreutils, sudo, jasper, bind, bash, libtirpc, nss and nss-util affect IBM SmartCloud Entry	19 Jul 202000:49	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities have been fixed in products bundled with IBM Security Directory Suite 8.0.1	16 Jun 201822:04	–	ibm
IBM Security Bulletins	Security Bulletin: A vulnerability in NSS affects PowerKVM	18 Jun 201801:36	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple packages as used in IBM Security QRadar Packet Capture are vulnerable to various security issues.	28 Oct 202017:16	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Access Manager Appliance is affected by a Network Security Services (NSS) vulnerability (CVE-2017-5461)	16 Jun 201822:01	–	ibm
IBM Security Bulletins	Security Bulletin: IBM MQ Appliance is affected by a Network Security Services (NSS) vulnerability (CVE-2017-5461)	13 Aug 201919:16	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Mozilla Firefox vulnerability issues in IBM SONAS.	18 Jun 201800:35	–	ibm
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 45.9.0-alt1	20 Apr 201700:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 52.1.0-alt1	2 May 201700:00	–	altlinux

Vulners

Node

OR

mozilla network_security_servicesRange<3.21.4

mozilla network_security_servicesRange3.22–3.28.4

mozilla network_security_servicesRange3.29–3.29.5

mozilla network_security_servicesRange3.30–3.30.1

oracle oracle_communications_messaging_serverMatch8.0

oracle oracle_directory_server_enterprise_editionMatch11.1.1.7

juniper_networks junos_space_security_directorMatch21.1

oracle iplanet_web_serverMatch7.0

canonical ubuntuMatch17.04

canonical ubuntuMatch16.10

red_hat red_hat_enterprise_linux_serverMatch6

red_hat red_hat_enterprise_linux_serverMatch7

red_hat red_hat_enterprise_linux_serverMatch5

Source	Link
securityfocus	www.securityfocus.com/bid/98050
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.21.4_release_notes
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.28.4_release_notes
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.29.5_release_notes
developer	www.developer.mozilla.org/en-US/docs/Mozilla/Projects/NSS/NSS_3.30.1_release_notes
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2017-10/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2017-11/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2017-12/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2017-13/

19 Jun 2021 00:00Current

7High risk

Vulners AI Score7

CVSS 27.5

EPSS0.04741

network security services buffer overflow base64 encoding misdecoded data crafted certificate