CVE-2017-11697: Improper Restriction of Operations within the Bounds of a Memory Buffer

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

CVE-2017-11695: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

PT-2017-12187

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description A heap-based buffer overflow issue exists in the get page function in lib/dbm/src/h page.c, allowing context-dependent attackers to have an unspecified impact...

PT-2017-12186

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description The issue allows context-dependent attackers to cause a denial of service, resulting in a floating point exception and crash, via a crafted cert8.db file. This i...

PT-2017-12184

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description A heap-based buffer overflow issue exists in the alloc segs function in lib/dbm/src/hash.c, which can be exploited by context-dependent attackers using a crafted...

PT-2017-12185

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description A heap-based buffer overflow issue exists in the hash open function in lib/dbm/src/hash.c, allowing context-dependent attackers to have an unspecified impact usi...

CVE-2017-11696: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

CVE-2017-11698: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in the getpage function in lib/dbm/src/hpage.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

SUSE-SU-2017:2872-1 Security update for MozillaFirefox, mozilla-nss

This update for MozillaFirefox and mozilla-nss fixes the following issues: Mozilla Firefox was updated to ESR 52.4 bsc1060445 MFSA 2017-22/CVE-2017-7825: OS X fonts render some Tibetan and Arabic unicode characters as spaces MFSA 2017-22/CVE-2017-7805: Use-after-free in TLS 1.2 generating handsha...

USN-3436-1 thunderbird vulnerabilities

Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing-like context, an attacker could potentially exploit these to read uninitialized memory, bypass phishing and malware protection, conduct cross-site scripting XSS...

CentOS Update for nss CESA-2017:2832 centos6

Check the version of nss SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.882776";...

USN-3431-1 nss vulnerability

Martin Thomson discovered that NSS incorrectly generated handshake hashes. A remote attacker could use this issue to cause NSS to crash, resulting in a denial of service, or possibly execute arbitrary code...

nss: Potential use-after-free in TLS 1.2 server when verifying client authentication

A use-after-free flaw was found in the TLS 1.2 implementation in the NSS library when client authentication was used. A malicious client could use this flaw to cause an application compiled against NSS to crash or, potentially, execute arbitrary code with the permission of the user running the...

CVE-2017-11696

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

CVE-2017-11695

Heap-based buffer overflow in the allocsegs function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

The vulnerability of the Network Security Services library allows a perpetrator to cause a service failure or exert other effects.

The vulnerability of the Network Security Services library lies in the writing beyond the buffer boundaries in memory. This vulnerability arises due to incorrect decoding of Base64-encoded data. Exploiting this vulnerability can allow a malicious actor to cause service failures or other effects b...

Mozilla Network Security Services heap buffer overflow vulnerability (CNVD-2017-27972)

Network Security Services is a library of functions Network Security Services Library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in hashopen in the Network Security Services file lib/dbm/src/hash.c, which allo...

Mozilla Network Security Services heap buffer overflow vulnerability (CNVD-2017-27971)

Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in hashopen in the Network Security Services file hash.c, which allows an attacker to execute arbitrary code, failure o...

Mozilla Network Security Services Heap Buffer Overflow Vulnerability

Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in allocsegs in the Network Security Services file lib/dbm/src/hash.c, which allows an attacker to execute arbitrary...

Mozilla Network Security Services heap buffer overflow vulnerability (CNVD-2017-27970)

Mozilla Network Security Services is a library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in getpage in the Network Security Services file lib/dbm/src/hpage.c, which allows an attacker to execute arbitrary cod...