CVE Database›Document archive›CVE-2023-2953

CVE-2023-2953

openldap: null pointer dereference in ber_memalloc_x function

Loading…

Severity

Low

Red Hat Product Security

7.1

CVSS 3.1

Review impact separately from score.

Published · May 29, 2023

Updated · November 21, 2025

Description

A vulnerability was found in OpenLDAP, in ber_memalloc_x() function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service operations relying on LDAP for authentication.

Statement

This vulnerability is rated as a low severity because, it affects only systems where memory exhaustion might occur due to mishandling of users crafted inputs, and it requires an authenticated user to trigger the issue.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.1
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H

CWE-476 · NULL Pointer Dereference