The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.

...

SUSE CVE-2017-11696

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

UBUNTU-CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

DEBIAN-CVE-2017-11696

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

PT-2017-12185

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description A heap-based buffer overflow issue exists in the hash open function in lib/dbm/src/hash.c, allowing context-dependent attackers to have an unspecified impact usi...

PT-2017-12186

Name of the Vulnerable Software and Affected Versions Mozilla Network Security Services NSS affected versions not specified Description The issue allows context-dependent attackers to cause a denial of service, resulting in a floating point exception and crash, via a crafted cert8.db file. This i...

Mozilla Network Security Services heap buffer overflow vulnerability (CNVD-2017-27972)

Network Security Services is a library of functions Network Security Services Library that provides cross-platform support for SSL, S/MIME and other Internet security standards. A buffer overflow vulnerability exists in hashopen in the Network Security Services file lib/dbm/src/hash.c, which allo...