VulnSocial

CVE-2015-3276Patch(openldap / enterprise_linux_desktop)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch openldap enterprise_linux_desktop systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

openldap CVEsBack to dashboard
1.5/ 10 priority

Sources & remediation

Patch / fix
Vendor / third-party advisories

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • enterprise_linux_desktop
  • enterprise_linux_eus
  • enterprise_linux_hpc_node
  • enterprise_linux_server

Threat summary

  • Patch or workaround signal is available
  • 1 mentions across 1 observed day

What's happening

  • Patch or workaround mentioned in 1 signal
  • 1 total mentions across 1 day

Affected systems

Vendors
openldaporacleredhat
Products
enterprise_linux_desktopenterprise_linux_eusenterprise_linux_hpc_nodeenterprise_linux_serverenterprise_linux_server_ausenterprise_linux_server_tusenterprise_linux_workstationlinuxopenldap

7 versions affected across 9 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-03-11: 1Patch / Workaround · 2026-03-11: 103-11
Signal classification1 categories
Patch
1100.0%
Full discourse1 post
  • GCP Weekly@gcpweekly
    Patch

    This addresses the following vulnerabilities: CVE-2010-4756 CVE-2011-3389 CVE-2013-4392 CVE-2015-3276 CVE-2017-14159 CVE-2017-17740 CVE-2018-20796 CVE-2018-5709 CVE-2018-6829 CVE-2019-1010022 CVE-2019-1010023 CVE-2019-1010024 CVE-2019-1010025 CVE-2019-9192 CVE-2020-15719 9/19

    Post summary

    The text lists CVE numbers, indicating the release of a patch that addresses these vulnerabilities, with no proof‑of‑concept, exploit code, active exploitation evidence, or technical details provided.

    1000023
    1.8K followersView on X
CPE platform detail18 entries

18 of 18 entries

PartVendorProductVersionTarget SWTarget HW
Appopenldapopenldap---
OSoraclelinux7--
OSredhatenterprise_linux_desktop7.0--
OSredhatenterprise_linux_eus7.3--
OSredhatenterprise_linux_eus7.4--
OSredhatenterprise_linux_eus7.5--
OSredhatenterprise_linux_eus7.6--
OSredhatenterprise_linux_eus7.7--
OSredhatenterprise_linux_hpc_node7.0--
OSredhatenterprise_linux_server7.0--
OSredhatenterprise_linux_server_aus7.3--
OSredhatenterprise_linux_server_aus7.4--
OSredhatenterprise_linux_server_aus7.6--
OSredhatenterprise_linux_server_aus7.7--
OSredhatenterprise_linux_server_tus7.3--
OSredhatenterprise_linux_server_tus7.6--
OSredhatenterprise_linux_server_tus7.7--
OSredhatenterprise_linux_workstation7.0--

Explore more

Back to dashboardopenldap CVEsoracle CVEsredhat CVEsenterprise_linux_desktop vulnerabilities