EUVD-2017-3307

Malware in sbrugna...

SUSE CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

UBUNTU-CVE-2017-11696

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

Design/Logic Flaw

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

CVE-2017-11697

CVE-2017-11697 affects Mozilla NSS: the __hash_open function in hash.c:229 can be abused via a crafted cert8.db to trigger a denial-of-service (floating point exception and crash) locally. The provided documents confirm the vulnerability detail but do not specify a vendor patch in the CVE entry i...

CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

CVE-2017-11696

Heap-based buffer overflow in the hashopen function in lib/dbm/src/hash.c in Mozilla Network Security Services NSS allows context-dependent attackers to have unspecified impact using a crafted cert8.db file...

CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...

CVE-2017-11697

The hashopen function in hash.c:229 in Mozilla Network Security Services NSS allows context-dependent attackers to cause a denial of service floating point exception and crash via a crafted cert8.db file...