CVE-2023-2953
openldap: null pointer dereference in ber_memalloc_x function
Severity
LowRed Hat Product Security
CVSS 3.1
Review impact separately from score.
Published · May 29, 2023
Updated · November 21, 2025
Description
A vulnerability was found in OpenLDAP, in ber_memalloc_x() function, leading to a null pointer dereference. This flaw can result in reduced system memory and cause LDAP authentication failures. The impact is primarily a disruption in authentication processes, which may hinder user access or service operations relying on LDAP for authentication.
Statement
This vulnerability is rated as a low severity because, it affects only systems where memory exhaustion might occur due to mishandling of users crafted inputs, and it requires an authenticated user to trigger the issue.
CVSS score applicability
The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.
Mitigation
No mitigation is specified in collected source.
CVSS / CWE
CVSS 3.1 · 7.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H
CWE-476 · NULL Pointer Dereference