The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
References
| Link | Resource |
|---|---|
| http://rhn.redhat.com/errata/RHSA-2015-2131.html | Third Party Advisory |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html | Third Party Advisory |
| http://www.securitytracker.com/id/1034221 | Broken Link Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1238322 | Issue Tracking Patch Third Party Advisory |
| http://rhn.redhat.com/errata/RHSA-2015-2131.html | Third Party Advisory |
| http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html | Third Party Advisory |
| http://www.securitytracker.com/id/1034221 | Broken Link Third Party Advisory VDB Entry |
| https://bugzilla.redhat.com/show_bug.cgi?id=1238322 | Issue Tracking Patch Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Configuration 2 (hide)
|
Configuration 3 (hide)
|
History
21 Nov 2024, 02:29
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://rhn.redhat.com/errata/RHSA-2015-2131.html - Third Party Advisory | |
| References | () http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - Third Party Advisory | |
| References | () http://www.securitytracker.com/id/1034221 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () https://bugzilla.redhat.com/show_bug.cgi?id=1238322 - Issue Tracking, Patch, Third Party Advisory |
28 Apr 2023, 18:28
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:o:redhat:enterprise_linux_eus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.5:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.6:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.7:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_eus:7.4:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_tus:7.3:*:*:*:*:*:*:* cpe:2.3:o:redhat:enterprise_linux_server_aus:7.6:*:*:*:*:*:*:* cpe:2.3:o:oracle:linux:7:-:*:*:*:*:*:* |
|
| References | (CONFIRM) https://bugzilla.redhat.com/show_bug.cgi?id=1238322 - Issue Tracking, Patch, Third Party Advisory | |
| References | (SECTRACK) http://www.securitytracker.com/id/1034221 - Broken Link, Third Party Advisory, VDB Entry | |
| References | (CONFIRM) http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - Third Party Advisory | |
| References | (REDHAT) http://rhn.redhat.com/errata/RHSA-2015-2131.html - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : 5.0
v3 : 7.5 |
| CWE | NVD-CWE-noinfo | |
| First Time |
Redhat enterprise Linux Server Tus
Redhat enterprise Linux Server Aus Redhat enterprise Linux Eus Oracle Oracle linux |
Information
Published : 2015-12-07 20:59
Updated : 2025-04-12 10:46
NVD link : CVE-2015-3276
Mitre link : CVE-2015-3276
CVE.ORG link : CVE-2015-3276
JSON object : View
Products Affected
redhat
- enterprise_linux_server_tus
- enterprise_linux_workstation
- enterprise_linux_server
- enterprise_linux_desktop
- enterprise_linux_hpc_node
- enterprise_linux_server_aus
- enterprise_linux_eus
openldap
- openldap
oracle
- linux
CWE