Patchwire CVEs, their patch status, and feeds to follow them

CVE-2017-11695

No fix known EPSS <1%

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

Published 2017-12-27 · CVE record · OSV

Products: mozilla network_security_services

Distro releases

ReleasePackageFixed in
Debian 12nssno fix
Debian 13nssno fix
Debian 14nssno fix
Ubuntu Pro 14.04 LTSnssno fix
Ubuntu Pro 16.04 LTSnssno fix
Ubuntu Pro 18.04 LTSnssno fix