The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings which might cause a weaker than intended cipher to be used and allow remote attackers to have unspecified impact via unknown vectors.

🗓️ 25 Sep 2020 00:00:00Reported by MicrosoftType

OpenLDAP's nss_parse_ciphers fails to parse OpenSSL-style multi-keyword ciphers, risking weaker encryption.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several vulnerabilities	4 Sep 202522:39	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to several issues due to open source packages	19 Nov 202514:30	–	ibm
IBM Security Bulletins	Security Bulletin: EDB PGAI Hybrid Management with IBM is affected by Multiple Vulnerabilities.	6 May 202615:18	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in OpenLDAP affect PowerKVM (CVE-2015-3276, CVE-2015-6908)	18 Jun 201801:30	–	ibm
Amazon	Medium: openldap	14 Feb 201700:00	–	amazon
Tenable Nessus	Amazon Linux AMI : openldap (ALAS-2017-799)	15 Feb 201700:00	–	nessus
Tenable Nessus	CentOS 7 : openldap (CESA-2015:2131)	2 Dec 201500:00	–	nessus
Tenable Nessus	Fedora 25 : openldap (2017-ceb1b8659e)	3 Feb 201700:00	–	nessus
Tenable Nessus	MiracleLinux 7 : openldap-2.4.40-8.el7 (AXSA:2015-705:02)	16 Jan 202600:00	–	nessus
Tenable Nessus	Oracle Linux 7 : openldap (ELSA-2015-2131)	24 Nov 201500:00	–	nessus