Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-11695

Опубликовано: 27 дек. 2017
Источник: nvd
CVSS3: 7.8
CVSS2: 4.6
EPSS Низкий

Описание

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*

EPSS

Процентиль: 25%
0.00088
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVSS3: 7.8
ubuntu
около 8 лет назад

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

CVSS3: 7.5
redhat
больше 8 лет назад

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

CVSS3: 7.8
debian
около 8 лет назад

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/h ...

CVSS3: 7.8
github
больше 3 лет назад

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

EPSS

Процентиль: 25%
0.00088
Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-119