Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2017-5461

Опубликовано: 11 мая 2017
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
Версия до 3.21.4 (исключая)
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
Версия от 3.22 (исключая) до 3.28.4 (исключая)
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
Версия от 3.29 (включая) до 3.29.5 (исключая)
cpe:2.3:a:mozilla:network_security_services:*:*:*:*:*:*:*:*
Версия от 3.30 (включая) до 3.30.1 (исключая)

EPSS

Процентиль: 79%
0.01237
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787

Связанные уязвимости

CVSS3: 9.8
ubuntu
больше 8 лет назад

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

CVSS3: 9.8
redhat
больше 8 лет назад

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

CVSS3: 9.8
debian
больше 8 лет назад

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through ...

CVSS3: 9.8
github
больше 3 лет назад

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

oracle-oval
больше 8 лет назад

ELSA-2017-1101: nss security update (CRITICAL)

EPSS

Процентиль: 79%
0.01237
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787