CVE-2017-11697 The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cer...
HighCVSS 7.8
EPSS 0.52%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss(Debian:12) | All versions | No fix listed |
| debian/nss(Debian:12) | = 2:3.100-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.101-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.102-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.103-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.105-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.105-2 | No fix listed |
| debian/nss(Debian:12) | = 2:3.106-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.107-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.108-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.109-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.110-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.111-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.112-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.114-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.116-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.117-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.119-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.120-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.121-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.123-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.123.1-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.124-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.126-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.127-1 | No fix listed |
Show 54 more
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/nss(Debian:12) | = 2:3.87.1-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.87.1-1+deb12u1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.87.1-1+deb12u2 | No fix listed |
| debian/nss(Debian:12) | = 2:3.87.1-1+deb12u3 | No fix listed |
| debian/nss(Debian:12) | = 2:3.87.1-1+deb12u4 | No fix listed |
| debian/nss(Debian:12) | = 2:3.87.1-1+x32 | No fix listed |
| debian/nss(Debian:12) | = 2:3.89-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.89-2 | No fix listed |
| debian/nss(Debian:12) | = 2:3.90-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.90-2 | No fix listed |
| debian/nss(Debian:12) | = 2:3.90-3 | No fix listed |
| debian/nss(Debian:12) | = 2:3.91-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.92-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.93-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.94-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.95-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.96.1-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.98-1 | No fix listed |
| debian/nss(Debian:12) | = 2:3.99-1 | No fix listed |
| debian/nss(Debian:13) | All versions | No fix listed |
| debian/nss(Debian:13) | = 2:3.110-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.110-1+deb13u1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.110-1+deb13u2 | No fix listed |
| debian/nss(Debian:13) | = 2:3.110-1+deb13u3 | No fix listed |
| debian/nss(Debian:13) | = 2:3.110-1+deb13u4 | No fix listed |
| debian/nss(Debian:13) | = 2:3.111-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.112-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.114-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.116-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.117-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.119-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.120-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.121-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.123-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.123.1-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.124-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.126-1 | No fix listed |
| debian/nss(Debian:13) | = 2:3.127-1 | No fix listed |
| debian/nss(Debian:14) | All versions | No fix listed |
| debian/nss(Debian:14) | = 2:3.110-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.111-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.112-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.114-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.116-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.117-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.119-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.120-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.121-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.123-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.123.1-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.124-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.126-1 | No fix listed |
| debian/nss(Debian:14) | = 2:3.127-1 | No fix listed |
| mozilla network security services | All versions | No fix listed |
References
- Debian Security Tracker CVE-2017-11697 vendor-advisory
- packetstormsecurity.com third-party-advisory vdb-entry
- 20170811 Multiple unpatched flaws exist in NSS (CVE-2017-11695, CVE-2017-11696, CVE-2017-11697, CVE-2017-11698) exploit mailing-list third-party-advisory
- www.geeknik.net exploit third-party-advisory
- 100345 third-party-advisory vdb-entry
- 1039153 third-party-advisory vdb-entry
- GLSA-202003-37 vendor-advisory
- bugs.debian.org issue-tracking