CVE-2023-2953

openldap: null pointer dereference in ber_memalloc_x function

Published May 30, 2023 CVSS 3.1 · 7.5 High EPSS 2.0% KEV · Not listed
Description
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2023-34399 A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
Ubuntu USN Ubuntu USN USN-6197-1 OpenLDAP vulnerability
Ubuntu USN Ubuntu USN USN-6616-1 OpenLDAP vulnerability
History
Type Values Removed Values Added
Metrics epss

{'score': 0.01417}

epss

{'score': 0.01456}

Type Values Removed Values Added
First Time appeared Redhat rhel E4s
CPEs cpe:/a:redhat:rhel_e4s:9.0
cpe:/a:redhat:rhel_eus:9.2
Vendors & Products Redhat rhel E4s
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
First Time appeared Redhat rhel Eus
CPEs cpe:/o:redhat:rhel_eus:8.8
Vendors & Products Redhat rhel Eus