CVE-2023-2953High· 7.5▾ TwilightA vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0.4 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
1.9%
A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
openldap = 2.4enterprise_linux = 8.0enterprise_linux = 9.0macos >= 11.0, < 11.7.9macos >= 12.0, < 12.6.8macos >= 13.0, < 13.5active_iq_unified_managerclustered_data_ontapontap_toolsh300s_firmwareh500s_firmwareh700s_firmwareh410s_firmwareh410c_firmwareUpgrade past the affected range:
macos 13.5Connected by shared product, vendor, weakness, or advisory.
CVE-2023-2609Medium· 5.5NULL Pointer Dereference in GitHub repository vim/vim prior to 9.0.1531.
CVE-2020-25692High· 7.5A NULL pointer dereference was found in OpenLDAP server and was fixed in openldap 2.4.55, during a request for renaming RDNs
CVE-2023-3212Medium· 4.4A NULL pointer dereference issue was found in the gfs2 file system in the Linux kernel
CVE-2022-29155Critical· 9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, via a SQL statement within an LDAP query
CVE-2021-27212High· 7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function via a crafted packet, resulting in a denial of service (daemon exit) via a short timestamp
CVE-2020-25710High· 7.5A flaw was found in OpenLDAP in versions before 2.4.56