CVE-2011-5094

CVE-2011-5094 describes a denial-of-service vulnerability in Mozilla Network Security Services (NSS) 3.x, affecting configurations where the SSL_ENABLE_RENEGOTIATION option is set. This flaw allows remote attackers to consume excessive CPU resources by repeatedly initiating renegotiations within a single SSL/TLS connection. The vulnerability has a CVSS score of 4.3, indicating a medium attack complexity (AC:M) and a partial impact on availability (A:P), with no impact on confidentiality or integrity. It is a network-based attack (AV:N) requiring no authentication (Au:N). There is no evidence of active exploitation, nor are there publicly available exploit modules in Metasploit, Nuclei, or ExploitDB. While there is minimal community discussion, the vulnerability is not listed on the KEV catalog and is considered inactive on the Hot List.