Back to feed
EUVD-2015-3324 · Published Dec 7, 2015
The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.
Technologies
Redhat Enterprise Linux WorkstationRedhat Enterprise Linux ServerRedhat Enterprise Linux Server AusRedhat Enterprise Linux EusOracle LinuxRedhat Enterprise Linux Hpc NodeRedhat Enterprise Linux DesktopRedhat Enterprise Linux Server TusOpenldap Openldap
CVSS scores
- v3.17.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N - v2.05.0
AV:N/AC:L/Au:N/C:N/I:P/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
