CVE catalog

CVE-2015-3250

apache-directory-api: CVE-2015-3250

[CVE catalog]

Severity
Medium
Published
Sep 7, 2017
EPSS
5.12% · Oct 22, 2026

Apache Directory LDAP API before 1.0.0-M31 allows attackers to conduct timing attacks via unspecified vectors.

Packages

[Debian 12 (Bookworm)]

  • [libapache-directory-api-java]Fixed

    Source package: [apache-directory-api]

    Details (2)

    • 2.1.2-1 · all · bookworm

      Fixed · Fixed: 1.0.0~M20-3

      dsa · apache-directory-api · debian · bookworm; dsa · apache-directory-api · debian · 12

    • 2.1.2-1 · all · bookworm

      Fixed · Fixed: 1.0.0~M20-3

      dsa · apache-directory-api · debian · bookworm; dsa · apache-directory-api · debian · 12

[Debian 13 (Trixie)]

  • [libapache-directory-api-java]Fixed

    Source package: [apache-directory-api]

    Details (2)

    • 2.1.2-2 · all · trixie

      Fixed · Fixed: 1.0.0~M20-3

      dsa · apache-directory-api · debian · 13

    • 2.1.2-2 · all · trixie

      Fixed · Fixed: 1.0.0~M20-3

      dsa · apache-directory-api · debian · 13

Observed: Oct 23, 2026

References

[Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database]