CVE-2011-5094

CVE-2011-5094 : Mozilla NSS 3.x, when SSL_ENABLE_RENEGOTIATION is set in certain ways, does not properly restrict client-initiated renegotiation within SSL/TLS. This can allow a remote attacker to induce repeated renegotiations on a single connection, causing CPU exhaustion and a potential denial...

CVE-2012-0441

The CVE-2012-0441 issue affects the NSS ASN.1 decoder QuickDER. The flaw allows a remote attacker to trigger a denial of service (application crash) via a zero-length item in ASN.1 structures (e.g., a zero-length basic constraint or a zero-length OCSP field). Affected software includes NSS-based ...