Findings

CVE-2023-2953

A vulnerability was found in openldap.

Published May 30, 2023 · updated Oct 14, 2026 · openldap openldap

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Timeline

Detection, updates, and resolution for this record.

  1. May 30, 2023 · NIST NVD

    Detected

    A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

  2. Oct 14, 2026 · NIST NVD

    Updated

    A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Affected

  • cpe apple/macosversion unspecified
  • cpe netapp/active iq unified managerversion unspecified
  • cpe netapp/clustered data ontapversion unspecified
  • cpe netapp/h300s firmwareversion unspecified
  • cpe netapp/h410s firmwareversion unspecified
  • cpe netapp/h500s firmwareversion unspecified
  • cpe netapp/h700s firmwareversion unspecified
  • cpe openldap/openldap2.4
  • cpe redhat/enterprise linux8.0
  • cpe redhat/enterprise linux9.0

Sources

  • CVE.orgCVE-2023-2953

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-2953

    30-day exploitation probability 2.0%

    first.org
  • NIST NVDCVE-2023-2953

    A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

    nvd.nist.gov

References