[arch-security] [ASA-201704-4] nss: arbitrary code execution
rgacogne at archlinux.org
Thu Apr 20 10:14:53 UTC 2017
Arch Linux Security Advisory ASA-201704-4
Date : 2017-04-20
CVE-ID : CVE-2017-5461
Package : nss
Type : arbitrary code execution
Remote : Yes
Link : https://security.archlinux.org/AVG-247
The package nss before version 3.30.1-1 is vulnerable to arbitrary code
Upgrade to 3.30.1-1.
# pacman -Syu "nss>=3.30.1-1"
The problem has been fixed upstream in version 3.30.1.
An out-of-bounds write during Base64 decoding operation has been found
in the Network Security Services (NSS) library due to insufficient
memory being allocated to the buffer.
An attacker could use this flaw to create a specially crafted
certificate which, when parsed by NSS, could cause it to crash or
execute arbitrary code, using the permissions of the user running an
application compiled against the NSS library. The issue has been fixed
in releases 3.29.5 and 3.30.1.
A remote attacker can execute arbitrary code on the affected host,
using a specially crafted certificate.
-------------- next part --------------
A non-text attachment was scrubbed...
Size: 833 bytes
Desc: OpenPGP digital signature
More information about the arch-security