high7.5
CVE-2023-2953
A vulnerability was found in openldap.
Impact
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openldap | Openldap | Version 2.4 |
| Redhat | Enterprise Linux | Versions 8.0, 9.0 |
| Apple | Macos | from 11.0 before 11.7.9 from 12.0 before 12.6.8 from 13.0 before 13.5 |
| Netapp | Active Iq Unified Manager | All versions |
| Netapp | Clustered Data Ontap | All versions |
| Netapp | Ontap Tools | All versions |
| Netapp | H300s Firmware | All versions |
| Netapp | H500s Firmware | All versions |
| Netapp | H700s Firmware | All versions |
| Netapp | H410s Firmware | All versions |
| Netapp | H410c Firmware | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2023/Jul/47
- http://seclists.org/fulldisclosure/2023/Jul/48
- http://seclists.org/fulldisclosure/2023/Jul/52
- https://access.redhat.com/security/cve/CVE-2023-2953
- https://bugs.openldap.org/show_bug.cgi?id=9904
- https://security.netapp.com/advisory/ntap-20230703-0005/
- https://support.apple.com/kb/HT213843
- https://support.apple.com/kb/HT213844
- https://support.apple.com/kb/HT213845
- https://cert-portal.siemens.com/productcert/html/ssa-398330.html
- https://cert-portal.siemens.com/productcert/html/ssa-806742.html