CVE-2017-11695

Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file.

• CWE-119

• http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Aug/17Exploit, Mailing List, Third Party Advisory
• http://www.geeknik.net/9brdqk6xuExploit, Third Party Advisory
• http://www.securityfocus.com/bid/100345Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039153Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/202003-37
• http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.htmlThird Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2017/Aug/17Exploit, Mailing List, Third Party Advisory
• http://www.geeknik.net/9brdqk6xuExploit, Third Party Advisory
• http://www.securityfocus.com/bid/100345Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039153Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/202003-37

Published

Dec 27, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-11687Multiple Persistent cross-site scripting (XSS) vulnerabiliti…
• CVE-2017-1169IBM DOORS next Generation (DNG/RRC) is vulnerable to cross-s…
• CVE-2017-11691Cross-site scripting (XSS) vulnerability in auth_profile.php…
• CVE-2017-11692The function "Token& Scanner::peek" in scanner.cpp in yaml-c…
• CVE-2017-11693MEDHOST Document Management System contains hard-coded crede…
• CVE-2017-11694MEDHOST Document Management System contains hard-coded crede…
• CVE-2017-11696Heap-based buffer overflow in the __hash_open function in li…
• CVE-2017-11697The __hash_open function in hash.c:229 in Mozilla Network Se…
• CVE-2017-11698Heap-based buffer overflow in the __get_page function in lib…
• CVE-2017-1170IBM WebSphere Commerce Enterprise, Professional, Express, an…
• CVE-2017-11703A memory leak vulnerability was found in the function parseS…
• CVE-2017-11704A heap-based buffer over-read was found in the function deco…