CVE-2023-2953
CVSS 3.1 Score 7.5 of 10 (high)
Details
Published May 30, 2023
Updated: Jan 10, 2025
CWE ID 476
Summary
CVE-2023-2953 is a newly identified vulnerability affecting OpenLDAP. The issue resides in the ber_memalloc_x() function, which can lead to a null pointer dereference. Successful exploitation of this vulnerability could result in unintended application behavior or denial of service, posing a significant risk to systems utilizing OpenLDAP. Organizations are strongly advised to apply the necessary patches or updates to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- MacOS
- Red Hat Enterprise Linux
- OpenLDAP
Affected Vendors
- Apple
- Red Hat
- OpenLDAP Project
- NetApp