CVE-2023-2953

HighCVSS 7.5/10Last modified Oct 14, 2026

Description

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-476

Affected software

No affected versions have been published.

Timeline

Published
May 30, 2023
Last modified
Oct 14, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-295306.5Laminas Diactoros provides PSR HTTP Message implementations. In versions 2.18.0 and prior, 2.19.0, 2.20.0, 2.21.0, 2.22.0, 2.23.0, 2.24.0, aCVE-2023-295319.8An attacker could have caused an out of bounds memory access using WebGL APIs, leading to memory corruption and a potentially exploitable crCVE-2023-295325.5A local attacker can trick the Mozilla Maintenance Service into applying an unsigned update file by pointing the service at an update file oCVE-2023-295334.3A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>winCVE-2023-295349.1Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android. These could have led to potential useCVE-2023-295356.5Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corrupCVE-2023-295368.8An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertioCVE-2023-295377.5Multiple race conditions in the font initialization could have led to memory corruption and execution of attacker-controlled code. This vulnCVE-2023-295384.3Under specific circumstances a WebExtension may have received a <code>jar:file:///</code> URI instead of a <code>moz-extension:///</code> URCVE-2023-295398.8When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL chaCVE-2023-29545.4Cross-site Scripting (XSS) - Stored in GitHub repository liangliangyy/djangoblog prior to master.CVE-2023-295406.1Using a redirect embedded into <code>sourceMappingUrls</code> could allow for navigation to external protocol links in sandboxed iframes wit