PT-2015-6129 · Openldap+4 · Openldap+4

Martin Poole + 1 · Published 2015-11-19 · Updated 2025-11-24 · CVE-2015-3276

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions OpenLDAP (affected versions not specified)

Description The issue is related to the nss parse ciphers function in OpenLDAP, which does not properly parse OpenSSL-style multi-keyword mode cipher strings. This might cause a weaker than intended cipher to be used, potentially allowing remote attackers to have an unspecified impact.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

ALT-PU-2022-2606

AZL-6770

CESA-2015_2131

CVE-2015-3276

ECHO-0854-6756-555E

RHSA-2015:2131

RHSA-2015_2131

Affected Products

Alt Linux

Centos

Debian

Openldap

Red Hat

References · 11

• https://security-tracker.debian.org/tracker/CVE-2015-3276 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-3276 · Security Note
• https://bugzilla.redhat.com/show_bug.cgi?id=1238322 · Patch
• https://linux.oracle.com/errata/ELSA-2015-2131.html · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-3276 · Vendor Advisory
• http://rhn.redhat.com/errata/RHSA-2015-2131.html · Vendor Advisory
• https://osv.dev/vulnerability/AZL-6770 · Vendor Advisory
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-12-CVE-2015-3276 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2015-3276 · Vendor Advisory
• http://oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html · Note
• http://securitytracker.com/id/1034221 · Note