CVE-2015-3278

Published: Jul 25, 2017Modified: May 13, 2026

9.8

Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

The cipherstring parsing code in nss_compat_ossl while in multi-keyword mode does not match the expected set of ciphers for a given cipher combination, which allows attackers to have unspecified impact via unknown vectors.

Affected (1)

Products: Nss Compat Ossl Project: Nss Compat Ossl

Nss Compat Ossl Project

1 product

Nss Compat Ossl

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Nss Compat Ossl Project Nss Compat Ossl	All versions

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (2)

https://bugzilla.redhat.com/show_bug.cgi?id=1238326

Source: secalert@redhat.com

Issue TrackingThird Party AdvisoryVDB Entry

https://bugzilla.redhat.com/show_bug.cgi?id=1238326

Source: af854a3a-2127-422b-91ae-364da2661108

Issue TrackingThird Party AdvisoryVDB Entry

Timeline

No history available yet.