{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"openldap","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:13","exploited":false,"fixed_versions":[],"id":"tcs_01M5NB6RNQ1QYPTRB2XRCCKPPR","modified_at":"2026-09-09T07:00:49.409579420Z","published_at":"2015-12-07T20:59:03.023Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2015-3276","https://security-tracker.debian.org/tracker/CVE-2015-3276"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2015-3276#Debian:13/openldap","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2015-3276"}],"summary":"The nss_parse_ciphers function in libraries/libldap/tls_m.c in OpenLDAP does not properly parse OpenSSL-style multi-keyword mode cipher strings, which might cause a weaker than intended cipher to be u"}