BDU:2017-01833

BDU

High

Уязвимость набора библиотек Network Security Services вызвана с записью за границами буфера в памяти. Уязвимость существует из-за некоррект…

CVSS

7.5

High

EPSS

0.00

Published

2017-01-01

Updated

2017-01-01

Description

Уязвимость набора библиотек Network Security Services вызвана с записью за границами буфера в памяти. Уязвимость существует из-за некорректной операции декодирования Base64-чисел. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, вызвать отказ в обслуживании или оказать другое воздействие при помощи специально сформированного сертификата

Affected products

Juniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorJuniper networks inc. Junos space security directorMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security servicesMozilla corp. Network security services

CVSS vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Timeline

2017-01-01

Published

2017-01-01

Updated

CVSS 3.1 breakdown

Attack Vector

AV: N

Network (N)

Attack Complexity

AC: L

Low (L)

Authentication

Au: N

None (N)

Confidentiality Impact

C: P

Partial

Integrity Impact

I: P

Partial

Availability Impact

A: P

Partial

Exploit indicators

EPSS

0.000 · p0

Known exploited (KEV)

Known exploits — Сканер-ВС

No Сканер-ВС checks registered for this vulnerability yet.

Affected products

Oracle

Oracle Communications Messaging Server Iplanet Web Server Oracle Directory Server Enterprise Edition

Mozilla

Network Security Services

Juniper Networks

Junos Space Security Director

Product	Vendor	Status
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
junos space security director	juniper networks inc.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked
network security services	mozilla corp.	Tracked

Showing first 20 of 64

Source databases

BDU

Related vulnerabilities

CVE-2017-5461

External references