All errata/c7/ALT-PU-2016-1273-1
ALT-PU-2016-1273-1

Package update openldap in branch c7

Version2.4.42-alt0.M70C.2
Published2016-03-22
Max severityHIGH
Severity:

Closed issues (1)

CVE-2015-3276
HIGH7.5

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

Published: 2015-12-07Modified: 2025-04-12
CVSS 2.0MEDIUM 5.0
CVSS:2.0/AV:N/AC:L/Au:N/C:N/I:P/A:N
CVSS 3.xHIGH 7.5
CVSS:3.x/CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N