CVE-2015-3276

Fixed in a distro release EPSS 5%

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

Published 2015-12-07 · CVE record · OSV

Products: openldap, oracle linux, redhat enterprise_linux_desktop, redhat enterprise_linux_eus, redhat enterprise_linux_hpc_node, redhat enterprise_linux_server, redhat enterprise_linux_server_aus, redhat enterprise_linux_server_tus, redhat enterprise_linux_workstation

Distro releases