libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the…
Priority LOW 27CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Medium
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- Partial · None · None
- Fix status
- Fixed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA and Red Hat. Impact type from CWE-200.
Summary
libraries/libldap/tls_m.c in OpenLDAP, possibly 2.4.31 and earlier, when using the Mozilla NSS backend, always uses the default cipher suite even when TLSCipherSuite is set, which might cause OpenLDAP to use weaker ciphers than intended and make it easier for remote attackers to obtain sensitive information.
Why it matters now
EPSS 0.03909 90th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 26
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* | up to 2.4.31 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.6:*:*:*:*:*:*:* | 2.4.6 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:* | 2.4.7 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.8:*:*:*:*:*:*:* | 2.4.8 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.9:*:*:*:*:*:*:* | 2.4.9 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.10:*:*:*:*:*:*:* | 2.4.10 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.11:*:*:*:*:*:*:* | 2.4.11 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.12:*:*:*:*:*:*:* | 2.4.12 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.13:*:*:*:*:*:*:* | 2.4.13 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.14:*:*:*:*:*:*:* | 2.4.14 | Vulnerable | openldap |
- cpe:2.3:a:openldap:openldap:*:*:*:*:*:*:*:* Versions up to 2.4.31 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.6:*:*:*:*:*:*:* Versions 2.4.6 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.7:*:*:*:*:*:*:* Versions 2.4.7 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.8:*:*:*:*:*:*:* Versions 2.4.8 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.9:*:*:*:*:*:*:* Versions 2.4.9 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.10:*:*:*:*:*:*:* Versions 2.4.10 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.11:*:*:*:*:*:*:* Versions 2.4.11 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.12:*:*:*:*:*:*:* Versions 2.4.12 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.13:*:*:*:*:*:*:* Versions 2.4.13 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.14:*:*:*:*:*:*:* Versions 2.4.14 Vulnerable ·openldap
Show 16 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:openldap:openldap:2.4.15:*:*:*:*:*:*:* | 2.4.15 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.16:*:*:*:*:*:*:* | 2.4.16 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.17:*:*:*:*:*:*:* | 2.4.17 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.18:*:*:*:*:*:*:* | 2.4.18 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.19:*:*:*:*:*:*:* | 2.4.19 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.20:*:*:*:*:*:*:* | 2.4.20 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.21:*:*:*:*:*:*:* | 2.4.21 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:* | 2.4.22 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.23:*:*:*:*:*:*:* | 2.4.23 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.24:*:*:*:*:*:*:* | 2.4.24 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.25:*:*:*:*:*:*:* | 2.4.25 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:* | 2.4.26 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.27:*:*:*:*:*:*:* | 2.4.27 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.28:*:*:*:*:*:*:* | 2.4.28 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.29:*:*:*:*:*:*:* | 2.4.29 | Vulnerable | openldap |
| cpe:2.3:a:openldap:openldap:2.4.30:*:*:*:*:*:*:* | 2.4.30 | Vulnerable | openldap |
- cpe:2.3:a:openldap:openldap:2.4.15:*:*:*:*:*:*:* Versions 2.4.15 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.16:*:*:*:*:*:*:* Versions 2.4.16 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.17:*:*:*:*:*:*:* Versions 2.4.17 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.18:*:*:*:*:*:*:* Versions 2.4.18 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.19:*:*:*:*:*:*:* Versions 2.4.19 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.20:*:*:*:*:*:*:* Versions 2.4.20 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.21:*:*:*:*:*:*:* Versions 2.4.21 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.22:*:*:*:*:*:*:* Versions 2.4.22 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.23:*:*:*:*:*:*:* Versions 2.4.23 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.24:*:*:*:*:*:*:* Versions 2.4.24 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.25:*:*:*:*:*:*:* Versions 2.4.25 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.26:*:*:*:*:*:*:* Versions 2.4.26 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.27:*:*:*:*:*:*:* Versions 2.4.27 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.28:*:*:*:*:*:*:* Versions 2.4.28 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.29:*:*:*:*:*:*:* Versions 2.4.29 Vulnerable ·openldap
- cpe:2.3:a:openldap:openldap:2.4.30:*:*:*:*:*:*:* Versions 2.4.30 Vulnerable ·openldap
Remediation
Red Hat 1 advisory
- RHSA-2012:1151 Released 2012-08-08 · Red Hat rating Lowopenldap security and bug fix update
- Red Hat Enterprise Linux Desktop (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux Desktop Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2, openldap-servers-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux HPC Node (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux HPC Node Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2, openldap-servers-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux Server (v. 6) openldap-2.4.23-26.el6_3.2, openldap-2.4.23-26.el6_3.2.ppc, openldap-clients-2.4.23-26.el6_3.2 +3
- Red Hat Enterprise Linux Server Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-servers-sql-2.4.23-26.el6_3.2
- Red Hat Enterprise Linux Workstation (v. 6) openldap-2.4.23-26.el6_3.2, openldap-clients-2.4.23-26.el6_3.2, openldap-devel-2.4.23-26.el6_3.2 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) openldap-2.4.23-26.el6_3.2, openldap-servers-sql-2.4.23-26.el6_3.2
Vendor assessments
Red Hat
Red Hat rating: Low. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat Enterprise Linux Desktop (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux Desktop Optional (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux HPC Node (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux HPC Node Optional (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux Server (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux Server Optional (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux Workstation (v. 6) | Fixed | RHSA-2012:1151 |
| Red Hat Enterprise Linux Workstation Optional (v. 6) | Fixed | RHSA-2012:1151 |
Not affected: 1 product
- Red Hat Enterprise Linux 5
Timeline
- 2026-10-02 Threatist record created from CVE-2012-2668
- 2026-10-03 Alias added: GHSA-g25q-m772-8jx8
References
Advisory 2
Other 10
- [oss-security] 20120606 Re: CVE request: openldap does not honor TLSCipherSuite configuration option
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=676309
- http://www.openldap.org/its/index.cgi?findid=7285
- [oss-security] 20120605 CVE request: openldap does not honor TLSCipherSuite configuration option
- https://bugzilla.redhat.com/show_bug.cgi?id=825875
- [oss-security] 20120605 Re: CVE request: openldap does not honor TLSCipherSuite configuration option
- http://www.openldap.org/devel/gitweb.cgi?p=openldap.git%3Ba=commitdiff%3Bh=2c2bb2e
- https://support.apple.com/kb/HT210788
- 20191211 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
- 20191213 APPLE-SA-2019-12-10-3 macOS Catalina 10.15.2, Security Update 2019-002 Mojave, Security Update 2019-007 High Sierra
More Openldap vulnerabilities
- TI-2022-11700 In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability… CVSS 3.1CRITICAL 9.8
- TI-2020-18548 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to a slapd crash in… CVSS 3.1HIGH 7.5
- TI-2020-18541 An integer underflow was discovered in OpenLDAP before 2.4.57 leading to slapd crashes in… CVSS 3.1HIGH 7.5
- TI-2020-18547 A flaw was discovered in OpenLDAP before 2.4.57 leading to an infinite loop in slapd with… CVSS 3.1HIGH 7.5
- TI-2020-18542 A flaw was discovered in OpenLDAP before 2.4.57 leading to an assertion failure in slapd… CVSS 3.1HIGH 7.5
- TI-2006-05563 OpenLDAP before 2.3.29 allows remote attackers to cause a denial of service (daemon… CVSS 3.1HIGH 7.5
Sources
- CVE-2012-2668 · CVE Program
- CVE-2012-2668 · NVD
- FIRST EPSS
- GHSA-g25q-m772-8jx8 · GitHub Advisory Database · CC BY 4.0
- CVE-2012-2668 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences