GCVE - cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:network_security_services:-:*:*:*:*:*:*:*

part: a version: - update: *

Vendor	Mozilla (`be1b0d4e-21a7-5a25-9982-bbda6ef43ec1`)
Product	Network Security Services (`4393dd94-659d-5c94-8f09-87796249e528`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/nss-dev/nss`	purl2cpe	2026-06-01 10:17:53.216807
`pkg:mozilla/nss`	purl2cpe	2026-06-01 10:17:53.216808
`pkg:rpm/opensuse/mozilla-nss`	purl2cpe	2026-06-01 10:17:53.216809

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2017-11698`	vulnerable	2026-06-03 14:36:29.175776	Details available Heap-based buffer overflow in the __get_page function in lib/dbm/src/h_page.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file. Published: 2017-12-27T19:00:00.000Z Updated: 2024-08-05T18:19:37.767Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039153 http://www.securityfocus.com/bid/100345 http://www.geeknik.net/9brdqk6xu http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html http://seclists.org/fulldisclosure/2017/Aug/17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11697`	vulnerable	2026-06-03 14:36:29.175423	Details available The __hash_open function in hash.c:229 in Mozilla Network Security Services (NSS) allows context-dependent attackers to cause a denial of service (floating point exception and crash) via a crafted cert8.db file. Published: 2017-12-27T19:00:00.000Z Updated: 2024-08-05T18:19:38.896Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039153 http://www.securityfocus.com/bid/100345 http://www.geeknik.net/9brdqk6xu http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html http://seclists.org/fulldisclosure/2017/Aug/17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11696`	vulnerable	2026-06-03 14:36:29.175043	Details available Heap-based buffer overflow in the __hash_open function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file. Published: 2017-12-27T19:00:00.000Z Updated: 2024-08-05T18:19:38.411Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039153 http://www.securityfocus.com/bid/100345 http://www.geeknik.net/9brdqk6xu http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html http://seclists.org/fulldisclosure/2017/Aug/17	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2017-11695`	vulnerable	2026-06-03 14:36:29.174576	Details available Heap-based buffer overflow in the alloc_segs function in lib/dbm/src/hash.c in Mozilla Network Security Services (NSS) allows context-dependent attackers to have unspecified impact using a crafted cert8.db file. Published: 2017-12-27T19:00:00.000Z Updated: 2024-08-05T18:19:37.736Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id/1039153 http://www.securityfocus.com/bid/100345 http://www.geeknik.net/9brdqk6xu http://packetstormsecurity.com/files/143735/NSS-Buffer-Overflows-Floating-Point-Exception.html http://seclists.org/fulldisclosure/2017/Aug/17	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.