{"id":"CVE-2015-3276","aliases":["AZL-6770","DEBIAN-CVE-2015-3276","EUVD-2015-3324","GHSA-cc3w-xgwq-vgw8","RHSA-2015:2131","ROOT-OS-DEBIAN-12-CVE-2015-3276"],"status":"published","title":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse...","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.05269,"percentile":0.92606,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2015-12-07T20:00:00Z","modified":"2026-09-09T07:00:49Z","fixes":[{"ecosystem":"Azure Linux:2","package":"openldap","fixed_in":["2.4.57-5"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"openldap","fixed_in":["2.5.13+dfsg-5.root.io.5","2.5.13+dfsg-5.root.io.4","2.5.13+dfsg-5.root.io.3","2.5.13+dfsg-5.root.io.6","2.5.13+dfsg-5.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-openldap","fixed_in":["2.5.13+dfsg-5.root.io.5","2.5.13+dfsg-5.root.io.4","2.5.13+dfsg-5.root.io.3","2.5.13+dfsg-5.root.io.6","2.5.13+dfsg-5.aikido.7"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Azure Linux:2","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-5"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.12-1","2.5.13+dfsg-5","2.5.13+dfsg-5+loong64","2.5.16+dfsg-1","2.5.16+dfsg-2","2.5.17+dfsg-1","2.5.18+dfsg-1","2.5.18+dfsg-2","2.5.18+dfsg-3","2.5.19+dfsg-1","2.6.10+dfsg-1","2.6.13+dfsg-1","2.6.14+dfsg-1","2.6.14+dfsg-2","2.6.2+dfsg-1~exp1","2.6.2+dfsg-1~exp2","2.6.3+dfsg-1~exp1","2.6.4+dfsg-1~exp1","2.6.5+dfsg-1~exp1","2.6.6+dfsg-1~exp1","2.6.6+dfsg-1~exp2","2.6.7+dfsg-1~exp1","2.6.8+dfsg-1~exp1","2.6.8+dfsg-1~exp2","2.6.8+dfsg-1~exp3","2.6.8+dfsg-1~exp4","2.6.9+dfsg-1","2.6.9+dfsg-1~exp1","2.6.9+dfsg-1~exp2","2.6.9+dfsg-2","2:1.2.12.1-1","2:1.2.12.1-1.0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.12-1","2.6.10+dfsg-1","2.6.13+dfsg-1","2.6.14+dfsg-1","2.6.14+dfsg-2","2:1.2.12.1-1","2:1.2.12.1-1.0.1"]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.12-1","2.6.10+dfsg-1","2.6.13+dfsg-1","2.6.14+dfsg-1","2.6.14+dfsg-2","2:1.2.12.1-1","2:1.2.12.1-1.0.1"]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.40-8.el7"}]}],"bundled":2},{"source":"osv","ecosystem":"Root:Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13+dfsg-5.root.io.5"},{"fixed":"2.5.13+dfsg-5.root.io.4"},{"fixed":"2.5.13+dfsg-5.root.io.3"},{"fixed":"2.5.13+dfsg-5.root.io.6"},{"fixed":"2.5.13+dfsg-5.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13+dfsg-5.root.io.5"},{"fixed":"2.5.13+dfsg-5.root.io.4"},{"fixed":"2.5.13+dfsg-5.root.io.3"},{"fixed":"2.5.13+dfsg-5.root.io.6"},{"fixed":"2.5.13+dfsg-5.aikido.7"}]}]}],"products":[{"vendor":"openldap","product":"openldap"},{"vendor":"oracle","product":"linux"},{"vendor":"redhat","product":"enterprise_linux_desktop"},{"vendor":"redhat","product":"enterprise_linux_eus"},{"vendor":"redhat","product":"enterprise_linux_hpc_node"},{"vendor":"redhat","product":"enterprise_linux_server"},{"vendor":"redhat","product":"enterprise_linux_server_aus"},{"vendor":"redhat","product":"enterprise_linux_server_tus"},{"vendor":"redhat","product":"enterprise_linux_workstation"}],"references":[{"url":"http://rhn.redhat.com/errata/RHSA-2015-2131.html","tags":["vendor-advisory","x_refsource_REDHAT","x_transferred","Third Party Advisory","advisory"]},{"url":"http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1238322","tags":["x_refsource_CONFIRM","x_transferred","Issue Tracking","Patch","Third Party Advisory","advisory","fix","report"]},{"url":"http://www.securitytracker.com/id/1034221","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Broken Link","Third Party Advisory","VDB Entry","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2015-3276","tags":["web","advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2015:2131","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2015-3276","tags":["report"]},{"url":"https://github.com/advisories/GHSA-cc3w-xgwq-vgw8"},{"url":"https://security-tracker.debian.org/tracker/CVE-2015-3276","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1147982","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1158005","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174634","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1174723","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1175415","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1184585","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1209229","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1226600","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1230263","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1231228","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1245279","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2131.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2014-8182","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1095976","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-8182","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-8182","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2015-3276","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:00:00Z","modified":"2024-08-06T05:39:32.077Z","updated_at":"2026-11-02T14:35:42.331636Z"}],"euvd":[{"id":"EUVD-2015-3324","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:00:00Z","modified":"2024-08-06T05:39:32Z","updated_at":"2026-11-03T02:22:08.642556Z"}],"ghsa":[{"id":"GHSA-cc3w-xgwq-vgw8","title":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse...","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2022-05-17T03:47:56Z","modified":"2023-04-28T18:30:19Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T14:54:34.500941Z"}],"nvd":[{"id":"CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:59:03.023Z","modified":"2026-06-17T00:25:39.363Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:03:14.501367Z"}],"osv":[{"id":"AZL-6770","title":"CVE-2015-3276 affecting package openldap for versions less than 2.4.57-5","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:59:03Z","modified":"2026-04-21T04:38:14.540013Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:28:08.630357Z"},{"id":"CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:59:03Z","modified":"2026-04-10T03:45:15.150631Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:44:00.594921Z"},{"id":"DEBIAN-CVE-2015-3276","description":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.","status":"published","published":"2015-12-07T20:59:03.023Z","modified":"2026-09-09T07:00:49.40957942Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N","level":"high"}],"updated_at":"2026-11-02T15:45:26.752992Z"},{"id":"RHSA-2015:2131","title":"Red Hat Security Advisory: openldap security, bug fix, and enhancement update","status":"published","published":"2024-09-15T22:36:21Z","modified":"2026-06-26T12:21:50.2323585Z","cvss":[{"version":"3.0","score":3.7,"vector":"CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L","level":"low"}],"updated_at":"2026-11-02T15:53:03.182161Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2015-3276","title":"CVE-2015-3276 in openldap - Patched by Root","description":"Root has patched CVE-2015-3276 in the openldap package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:17:55Z","modified":"2026-08-26T01:12:54.997196545Z","updated_at":"2026-11-02T15:53:30.44348Z"}]}}