CVE Catalog

CVE-2017-5461

Critical
Published: Translated: NVD NIST

Summary

Mozilla Network Security Services (NSS) versions before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 are vulnerable to remote attacks that can cause denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

Risk Assessment

Attackers may exploit this vulnerability to disrupt service availability, leading to downtime and loss of system accessibility.

Recommendation

It is recommended to upgrade to the latest version of NSS to mitigate this vulnerability and secure the system against potential attacks.

Original NVD description (English source)

Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS