CVE Vulnerabilities

CVE-2023-2953

NULL Pointer Dereference

Published: May 30, 2023 | Modified: Aug 02, 2023
CVSS 3.x
7.5
HIGH
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7.1 LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
Ubuntu
LOW

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Weakness

A NULL pointer dereference occurs when the application dereferences a pointer that it expects to be valid, but is NULL, typically causing a crash or exit.

Affected Software

Name Vendor Start Version End Version
Openldap Openldap 2.4 (including) 2.4 (including)
Red Hat Enterprise Linux 8 RedHat openldap-0:2.4.46-19.el8_10 *
Red Hat Enterprise Linux 8.8 Extended Update Support RedHat openldap-0:2.4.46-20.el8_8 *
Openldap Ubuntu bionic *
Openldap Ubuntu esm-infra/bionic *
Openldap Ubuntu esm-infra/xenial *
Openldap Ubuntu focal *
Openldap Ubuntu jammy *
Openldap Ubuntu kinetic *
Openldap Ubuntu lunar *
Openldap Ubuntu trusty *
Openldap Ubuntu trusty/esm *
Openldap Ubuntu upstream *
Openldap Ubuntu xenial *

Potential Mitigations

References