Every CVE Search/ Get API key

CVE-2012-2668

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS...

4.3 MediumFix available

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.

Exploit likelihood

3.91%Up 0.1 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 4.3

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.

Record
CVE-2012-2668
CVSS 2.0
4.3 MediumAV:N/AC:M/Au:N/C:P/I:N/A:N
Weakness
CWE-200
Updated
2026-11-02
CVE List No score

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.

Record
CVE-2012-2668
Updated
2026-11-02
EUVDEUVD-2012-2651 No score

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.

Record
EUVD-2012-2651
Updated
2026-11-03
GitHub AdvisoriesGHSA-g25q-m772-8jx8 No score

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS...

libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.

Record
GHSA-g25q-m772-8jx8
Weakness
CWE-200
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
openldap
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-clients
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-debuginfo
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-devel
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers-sql
Red Hat:enterprise_linux:6::client
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-clients
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-debuginfo
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-devel
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
Show 14 moreShow less
Affected packages
PackageAffectedFixed
openldap-servers
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers-sql
Red Hat:enterprise_linux:6::computenode
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-clients
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-debuginfo
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-devel
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers-sql
Red Hat:enterprise_linux:6::server
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-clients
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-debuginfo
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-devel
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2
openldap-servers-sql
Red Hat:enterprise_linux:6::workstation
 before 0:2.4.23-26.el6_3.2
0:2.4.23-26.el6_3.2

History

History
RecordedChangedSources
aliasesEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2012-2668 is a medium vulnerability (CVSS 4.3) in Openldap, published June 17, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.91%, the 90th percentile. Fixed in openldap 0:2.4.23-26.el6_3.2.

References

Show 18 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open