CVE-2017-11697

CVE-2017-11697 affects Mozilla NSS: the __hash_open function in hash.c:229 can be abused via a crafted cert8.db to trigger a denial-of-service (floating point exception and crash) locally. The provided documents confirm the vulnerability detail but do not specify a vendor patch in the CVE entry i...

CVE-2017-11695

CVE-2017-11695 : Heap-based buffer overflow in the alloc_segs function of NSS (lib/dbm/src/hash.c) used by Mozilla NSS when processing crafted cert8.db files. Exploitation is context-dependent with unspecified impact per the entry. Public details explicitly describe the overflow but do not specif...

CVE-2017-11696

CVE-2017-11696 is a heap-based buffer overflow in NSS (hash_open in lib/dbm/src/hash.c) exploitable via a crafted cert8.db file. Connected sources confirm the NSS library is affected and provide remediation guidance: upgrade to a newer NSS version, e.g., Gentoo GLSA-202003-37/GLSA 202003-37 recom...

CVE-2017-11698

CVE-2017-11698 is a heap-based buffer overflow in NSS (Mozilla Network Security Services), triggered by malformed cert8.db data in the __get_page function (lib/dbm/src/h_page.c). The effect is described as context-dependent attackers having unspecified impact, with local access required. The conn...