Published: 30/05/2023 Updated: 02/08/2023

CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9

VMScore: 0

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Vulnerable Product	Search on Vulmon	Subscribe to Product
openldap openldap 2.4
redhat enterprise linux 8.0
redhat enterprise linux 9.0
apple macos
netapp clustered data ontap -
netapp active iq unified manager -
netapp ontap tools -
netapp h300s_firmware -
netapp h500s_firmware -
netapp h700s_firmware -
netapp h410s_firmware -
netapp h410c_firmware -

Debian Bug report logs - #1036995 openldap: CVE-2023-2953 Package: src:openldap; Maintainer for src:openldap is Debian OpenLDAP Maintainers <pkg-openldap-devel@listsaliothdebianorg>; Reported by: Salvatore Bonaccorso <carnil@debianorg> Date: Wed, 31 May 2023 19:18:01 UTC Severity: important Tags: security, upstre ...

A vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() function (CVE-2023-2953) ...

DescriptionA vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() functionA vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() function ...

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available Recent releases are listed on the Apple security updates page Apple security documents reference vulnerabilities by CVE-ID&nbsp ...

Critical Infrastructure Sectors: Critical Manufacturing

CWE-476 https://bugs.openldap.org/show_bug.cgi?id=9904 https://access.redhat.com/security/cve/CVE-2023-2953 https://security.netapp.com/advisory/ntap-20230703-0005/https://support.apple.com/kb/HT213845 https://support.apple.com/kb/HT213844 https://support.apple.com/kb/HT213843 http://seclists.org/fulldisclosure/2023/Jul/52 http://seclists.org/fulldisclosure/2023/Jul/48 http://seclists.org/fulldisclosure/2023/Jul/47 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1036995 https://nvd.nist.gov https://www.cisa.gov/news-events/ics-advisories/icsa-24-046-11 https://alas.aws.amazon.com/AL2/ALAS-2023-2095.html

CVE-2023-2953

Vulnerability Summary

Vendor Advisories

ICS Advisories

References

Vulmon Search

About

Products

Connect