PT-2015-6129 · Openldap+4 · Openldap+4

Martin Poole + 1 · Publicado 2015-11-19 · Atualizado 2025-11-24 · CVE-2015-3276

Positive Technologies (AI Summary)

CVSS v3.1

7.5

Alta

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenLDAP (affected versions not specified)

Description The issue is related to the nss parse ciphers function in OpenLDAP, which does not properly parse OpenSSL-style multi-keyword mode cipher strings. This might cause a weaker than intended cipher to be used, potentially allowing remote attackers to have an unspecified impact.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Identificadores relacionados

ALT-PU-2022-2606

AZL-6770

CESA-2015_2131

CVE-2015-3276

ECHO-0854-6756-555E

RHSA-2015:2131

RHSA-2015_2131

Produtos afetados

Alt Linux

Centos

Debian

Openldap

Red Hat

Referências · 11

• https://security-tracker.debian.org/tracker/CVE-2015-3276 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-3276 · Nota de Segurança
• https://bugzilla.redhat.com/show_bug.cgi?id=1238322 · Correção
• http://oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · Nota
• https://linux.oracle.com/errata/ELSA-2015-2131.html · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3276 · Aviso do Fabricante
• http://rhn.redhat.com/errata/RHSA-2015-2131.html · Aviso do Fabricante
• https://osv.dev/vulnerability/AZL-6770 · Aviso do Fabricante
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2015-3276 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2015-3276 · Aviso do Fabricante
• http://securitytracker.com/id/1034221 · Nota