Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security
    Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db
    file. (CVE-2017-11695)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security     Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db     file. (CVE-2017-11695)

Note that Nessus relies on the presence of the package as reported by the vendor.

The remote host is affected by the vulnerability described in GLSA-202003-37 (Mozilla Network Security Service: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Network       Security Service (NSS). Please review the CVE identifiers referenced       below for details.
  Impact :

    An attacker could execute arbitrary code, cause a Denial of Service       condition or have other unspecified impact.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Type	Severity
459523	Echo: nss: security update to 2:3.110-1+e1	Tenable Cloud Security	Echo Local Security Checks	Local	high
459523	Echo: nss: security update to 2:3.110-1+e1	Tenable Self-Hosted Container Security	Echo Local Security Checks	Local	high
232042	Linux Distros Unpatched Vulnerability : CVE-2017-11695	Nessus	Misc.	Local	high
134643	GLSA-202003-37 : Mozilla Network Security Service: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	Local	high

Detections

Analytics

CVE-2017-11695

high

Tenable Plugins

high

high

high

high