Description
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
None
Availability
High
Affected products
- Apple / macOS11.0 – 11.7.9
- NetApp / active_iq_unified_manager
- NetApp / Clustered Data ONTAP
- NetApp / h300s_firmware
- NetApp / h410c_firmware
- NetApp / h410s_firmware
- NetApp / h500s_firmware
- NetApp / h700s_firmware
- NetApp / ontap_tools
- openldap / openldap2.4 – 2.4
- RedHat / enterprise_linux9.0 – 9.0
- RedHat / enterprise_linux8.0 – 8.0
References
- MISChttps://bugs.openldap.org/show_bug.cgi?id=9904
- VENDOR_ADVISORYhttps://access.redhat.com/security/cve/CVE-2023-2953
- MISChttps://security.netapp.com/advisory/ntap-20230703-0005/
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213843
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213844
- VENDOR_ADVISORYhttps://support.apple.com/kb/HT213845
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/52
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/48
- MAILING_LISThttp://seclists.org/fulldisclosure/2023/Jul/47
Updated 15m ago · 8 sources