high
7.5
Advisory Published
CVE Published
Updated

CVE-2015-3276

First published: Wed Jul 01 2015(Updated: )

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

Credit: secalert@redhat.com

Affected SoftwareAffected VersionHow to fix
Red Hat OpenLDAP Servers<2.5
Oracle Linux=7
Red Hat Enterprise Linux Desktop=7.0
Red Hat Enterprise Linux Server EUS=7.3
Red Hat Enterprise Linux Server EUS=7.4
Red Hat Enterprise Linux Server EUS=7.5
Red Hat Enterprise Linux Server EUS=7.6
Red Hat Enterprise Linux Server EUS=7.7
Red Hat Enterprise Linux HPC Node=7.0
Red Hat Enterprise Linux Server=7.0
Red Hat Enterprise Linux Server=7.3
Red Hat Enterprise Linux Server=7.4
Red Hat Enterprise Linux Server=7.6
Red Hat Enterprise Linux Server=7.7
Red Hat Enterprise Linux Server=7.3
Red Hat Enterprise Linux Server=7.6
Red Hat Enterprise Linux Server=7.7
Red Hat Enterprise Linux Workstation=7.0

Remedy

https://bugzilla.redhat.com/show_bug.cgi?id=1238322

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Read MoreStart Free Trial

Reference Links

Frequently Asked Questions

  • What is the severity of CVE-2015-3276?

    CVE-2015-3276 has a medium severity classification, indicating potential risk due to improper cipher string parsing.

  • How do I fix CVE-2015-3276?

    To fix CVE-2015-3276, you should upgrade to a patched version of OpenLDAP that resolves the cipher string parsing issue.

  • What are the potential impacts of CVE-2015-3276?

    The potential impact of CVE-2015-3276 includes the usage of weaker ciphers, which may allow remote attackers to exploit security vulnerabilities.

  • Which software versions are affected by CVE-2015-3276?

    CVE-2015-3276 affects various versions of OpenLDAP prior to 2.5, along with several versions of Red Hat and Oracle Linux.

  • Is CVE-2015-3276 a remote attack vector?

    Yes, CVE-2015-3276 can be exploited by remote attackers through unspecified vectors due to the vulnerability in cipher string parsing.

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203