{"id":"CVE-2023-2953","aliases":["ALSA-2024:4264","AZL-27011","BELL-CVE-2023-2953","BIT-openldap-2023-2953","CLSA-2023-1688678407","CLSA-2023-1689257597","CLSA-2023-1689257904","CLSA-2023-1689700365","CLSA-2023-1689702307","CLSA-2023-1689702499","CLSA-2023-1701444589","CLSA-2024-1722003515","DEBIAN-CVE-2023-2953","EUVD-2023-34399","GHSA-26fx-c7cw-5jh4","MGASA-2023-0252","OESA-2023-1334","RHSA-2024:4264","RHSA-2024:6033","RHSA-2025:8176","RHSA-2025:8181","RLSA-2024:4264","ROOT-OS-DEBIAN-11-CVE-2023-2953","ROOT-OS-DEBIAN-12-CVE-2023-2953","SUSE-SU-2023:2483-1","SUSE-SU-2023:2484-1","SUSE-SU-2023:2503-1","UBUNTU-CVE-2023-2953","USN-6197-1","USN-6616-1","openSUSE-SU-2024:13012-1"],"status":"published","title":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in...","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01999,"percentile":0.80881,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-476"],"published":"2023-05-30T00:00:00Z","modified":"2026-11-02T02:45:55Z","fixes":[{"ecosystem":"AlmaLinux:8","package":"openldap","fixed_in":["2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openldap-clients","fixed_in":["2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openldap-devel","fixed_in":["2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"AlmaLinux:8","package":"openldap-servers","fixed_in":["2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Azure Linux:2","package":"openldap","fixed_in":["2.4.57-9"],"sources":["osv"]},{"ecosystem":"Alpaquita:23","package":"openldap","fixed_in":["2.6.3-r7"],"sources":["osv"]},{"ecosystem":"Bitnami","package":"openldap","fixed_in":["2.4.1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"ldap-utils","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap-2.4-2","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap-common","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap2-dev","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"slapd","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:18.04","package":"slapd-smbk5pwd","fixed_in":["2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap","fixed_in":["2.4.46-17.el8_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","fixed_in":["2.4.46-17.el8_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","fixed_in":["2.4.46-17.el8_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","fixed_in":["2.4.46-17.el8_4.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openldap","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openldap-clients","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openldap-devel","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:8.5","package":"openldap-servers","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"ldap-utils","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap-2.4-2","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap2-dev","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd-smbk5pwd","fixed_in":["2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","fixed_in":["2.4.40-16.el6.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap","fixed_in":["2.6.2-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-clients","fixed_in":["2.6.2-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-compat","fixed_in":["2.6.2-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-devel","fixed_in":["2.6.2-3.el9.tuxcare.els1"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-clients","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-devel","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-servers","fixed_in":["2.4.46-18.el8.tuxcare.els3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"openldap","fixed_in":["2.5.16+dfsg-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"openldap","fixed_in":["2.5.16+dfsg-1"],"sources":["osv"]},{"ecosystem":"Mageia:8","package":"openldap","fixed_in":["2.4.57-1.3.mga8"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","fixed_in":["2.4.50-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP3","package":"openldap","fixed_in":["2.4.50-8.oe1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS","package":"openldap","fixed_in":["2.6.0-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"openldap","fixed_in":["2.6.0-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-clients","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-clients-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-debugsource","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-devel","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-servers-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-clients-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-debugsource","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-servers","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-servers-debuginfo","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-clients","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-clients-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-debugsource","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-devel","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-servers-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-clients-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-debugsource","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-servers","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-servers-debuginfo","fixed_in":["0:2.4.46-20.el8_8"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-clients-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-compat-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-debugsource","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-devel","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-clients","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-clients-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-compat","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-compat-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-debuginfo","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-debugsource","fixed_in":["0:2.6.2-1.el9_0.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-clients-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-compat-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-debugsource","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-devel","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-clients","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-clients-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-compat","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-compat-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-debuginfo","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-debugsource","fixed_in":["0:2.6.2-3.el9_2.1"],"sources":["osv"]},{"ecosystem":"Rocky Linux:8","package":"openldap","fixed_in":["0:2.4.46-19.el8_10"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"openldap","fixed_in":["2.4.57+dfsg-3+deb11u1.root.io.1","2.4.57+dfsg-3+deb11u1.root.io.2","2.4.57+dfsg-3+deb11u1.root.io.3","2.4.57+dfsg-3+deb11u1.root.io.4","2.4.57+dfsg-3+deb11u1.root.io.5","2.4.57+dfsg-3+deb11u1.root.io.6","2.4.57+dfsg-3+deb11u1.aikido.8","2.4.57+dfsg-3+deb11u1.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:11","package":"rootio-openldap","fixed_in":["2.4.57+dfsg-3+deb11u1.root.io.1","2.4.57+dfsg-3+deb11u1.root.io.2","2.4.57+dfsg-3+deb11u1.root.io.3","2.4.57+dfsg-3+deb11u1.root.io.4","2.4.57+dfsg-3+deb11u1.root.io.5","2.4.57+dfsg-3+deb11u1.root.io.6","2.4.57+dfsg-3+deb11u1.aikido.8","2.4.57+dfsg-3+deb11u1.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"openldap","fixed_in":["2.5.13+dfsg-5.root.io.5","2.5.13+dfsg-5.root.io.4","2.5.13+dfsg-5.root.io.2","2.5.13+dfsg-5.root.io.1","2.5.13+dfsg-5.root.io.3","2.5.13+dfsg-5.root.io.6","2.5.13+dfsg-5.aikido.7"],"sources":["osv"]},{"ecosystem":"Root:Debian:12","package":"rootio-openldap","fixed_in":["2.5.13+dfsg-5.root.io.5","2.5.13+dfsg-5.root.io.4","2.5.13+dfsg-5.root.io.2","2.5.13+dfsg-5.root.io.1","2.5.13+dfsg-5.root.io.3","2.5.13+dfsg-5.root.io.6","2.5.13+dfsg-5.aikido.7"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","fixed_in":["2.4.41-22.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","fixed_in":["2.4.41-22.19.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","fixed_in":["2.4.41-22.19.1","2.4.41-45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap Micro 5.3","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.4","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"openSUSE:Leap 15.5","package":"openldap2","fixed_in":["2.4.46-150200.14.14.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","fixed_in":["2.4.41-45.1"],"sources":["osv"]},{"ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","fixed_in":["2.4.41-45.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","fixed_in":["2.4.31-1+nmu2ubuntu8.5+esm6"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","fixed_in":["2.4.42+dfsg-2ubuntu3.13+esm2"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openldap","fixed_in":["2.4.45+dfsg-1ubuntu1.11+esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"openldap","fixed_in":["2.4.49+dfsg-2ubuntu1.10"],"sources":["osv"]},{"ecosystem":"Ubuntu:22.04:LTS","package":"openldap","fixed_in":["2.5.16+dfsg-0ubuntu0.22.04.2"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"AlmaLinux:8","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Azure Linux:2","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-9"}]}]},{"source":"osv","ecosystem":"Alpaquita:23","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"2.6.3-r6"},{"fixed":"2.6.3-r7"}]}]},{"source":"osv","ecosystem":"Bitnami","package":"openldap","ranges":[{"type":"SEMVER","events":[{"introduced":"2.4.0"},{"fixed":"2.4.1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"ldap-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap-2.4-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"libldap2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"slapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:18.04","package":"slapd-smbk5pwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-17.el8_4.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"ldap-utils","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap-2.4-2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libldap2-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"slapd-smbk5pwd","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"openldap-servers-sql","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.40-16.el6.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:AlmaLinux:9.2","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.2-3.el9.tuxcare.els1"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-18.el8.tuxcare.els3"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["1:1.2.12-1","2.5.13+dfsg-5","2.5.13+dfsg-5+loong64","2.5.16+dfsg-1","2.5.16+dfsg-2","2.5.17+dfsg-1","2.5.18+dfsg-1","2.5.18+dfsg-2","2.5.18+dfsg-3","2.5.19+dfsg-1","2.6.10+dfsg-1","2.6.13+dfsg-1","2.6.14+dfsg-1","2.6.14+dfsg-2","2.6.2+dfsg-1~exp1","2.6.2+dfsg-1~exp2","2.6.3+dfsg-1~exp1","2.6.4+dfsg-1~exp1","2.6.5+dfsg-1~exp1","2.6.6+dfsg-1~exp1","2.6.6+dfsg-1~exp2","2.6.7+dfsg-1~exp1","2.6.8+dfsg-1~exp1","2.6.8+dfsg-1~exp2","2.6.8+dfsg-1~exp3","2.6.8+dfsg-1~exp4","2.6.9+dfsg-1","2.6.9+dfsg-1~exp1","2.6.9+dfsg-1~exp2","2.6.9+dfsg-2","2:1.2.12.1-1","2:1.2.12.1-1.0.1"]},{"source":"osv","ecosystem":"Debian:13","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.16+dfsg-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.16+dfsg-1"}]}]},{"source":"osv","ecosystem":"Mageia:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57-1.3.mga8"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP1","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP3","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.50-8.oe1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.6.0-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::baseos","package":"openldap-servers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::crb","package":"openldap-servers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::baseos","package":"openldap-servers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-servers","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.8::crb","package":"openldap-servers-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-20.el8_8"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::appstream","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_e4s:9.0::baseos","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-1.el9_0.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::appstream","package":"openldap-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-clients","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-clients-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-compat","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-compat-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Red Hat:rhel_eus:9.2::baseos","package":"openldap-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.6.2-3.el9_2.1"}]}]},{"source":"osv","ecosystem":"Rocky Linux:8","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.4.46-19.el8_10"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.1"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.2"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.3"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.4"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.5"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.6"},{"fixed":"2.4.57+dfsg-3+deb11u1.aikido.8"},{"fixed":"2.4.57+dfsg-3+deb11u1.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:11","package":"rootio-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.1"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.2"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.3"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.4"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.5"},{"fixed":"2.4.57+dfsg-3+deb11u1.root.io.6"},{"fixed":"2.4.57+dfsg-3+deb11u1.aikido.8"},{"fixed":"2.4.57+dfsg-3+deb11u1.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13+dfsg-5.root.io.5"},{"fixed":"2.5.13+dfsg-5.root.io.4"},{"fixed":"2.5.13+dfsg-5.root.io.2"},{"fixed":"2.5.13+dfsg-5.root.io.1"},{"fixed":"2.5.13+dfsg-5.root.io.3"},{"fixed":"2.5.13+dfsg-5.root.io.6"},{"fixed":"2.5.13+dfsg-5.aikido.7"}]}]},{"source":"osv","ecosystem":"Root:Debian:12","package":"rootio-openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.13+dfsg-5.root.io.5"},{"fixed":"2.5.13+dfsg-5.root.io.4"},{"fixed":"2.5.13+dfsg-5.root.io.2"},{"fixed":"2.5.13+dfsg-5.root.io.1"},{"fixed":"2.5.13+dfsg-5.root.io.3"},{"fixed":"2.5.13+dfsg-5.root.io.6"},{"fixed":"2.5.13+dfsg-5.aikido.7"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-22.19.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Real Time 15 SP3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.1","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Micro 5.2","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap Micro 5.3","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"openSUSE:Leap 15.5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.46-150200.14.14.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Legacy 12","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-45.1"}]}]},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP5","package":"openldap2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.41-45.1"}]}]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm6"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4","2.4.31-1+nmu2ubuntu8.5+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13+esm2"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12","2.4.42+dfsg-2ubuntu3.13","2.4.42+dfsg-2ubuntu3.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+esm1"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9","2.4.45+dfsg-1ubuntu1.10","2.4.45+dfsg-1ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.10"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6","2.4.49+dfsg-2ubuntu1.7","2.4.49+dfsg-2ubuntu1.8","2.4.49+dfsg-2ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.16+dfsg-0ubuntu0.22.04.2"}]}],"versions":["2.5.6+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu3","2.5.11+dfsg-1~exp1ubuntu3.1","2.5.12+dfsg-0ubuntu0.22.04.1","2.5.13+dfsg-0ubuntu0.22.04.1","2.5.14+dfsg-0ubuntu0.22.04.1","2.5.14+dfsg-0ubuntu0.22.04.2","2.5.15+dfsg-0ubuntu0.22.04.1","2.5.16+dfsg-0ubuntu0.22.04.1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.31-1+nmu2ubuntu8.5+esm6"}]}],"versions":["2.4.31-1+nmu2ubuntu3","2.4.31-1+nmu2ubuntu4","2.4.31-1+nmu2ubuntu5","2.4.31-1+nmu2ubuntu8","2.4.31-1+nmu2ubuntu8.1","2.4.31-1+nmu2ubuntu8.2","2.4.31-1+nmu2ubuntu8.3","2.4.31-1+nmu2ubuntu8.4","2.4.31-1+nmu2ubuntu8.5","2.4.31-1+nmu2ubuntu8.5+esm1","2.4.31-1+nmu2ubuntu8.5+esm2","2.4.31-1+nmu2ubuntu8.5+esm3","2.4.31-1+nmu2ubuntu8.5+esm4","2.4.31-1+nmu2ubuntu8.5+esm5"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.42+dfsg-2ubuntu3.13+esm2"}]}],"versions":["2.4.41+dfsg-1ubuntu2","2.4.41+dfsg-1ubuntu3","2.4.42+dfsg-2ubuntu1","2.4.42+dfsg-2ubuntu3","2.4.42+dfsg-2ubuntu3.1","2.4.42+dfsg-2ubuntu3.2","2.4.42+dfsg-2ubuntu3.3","2.4.42+dfsg-2ubuntu3.4","2.4.42+dfsg-2ubuntu3.5","2.4.42+dfsg-2ubuntu3.6","2.4.42+dfsg-2ubuntu3.7","2.4.42+dfsg-2ubuntu3.8","2.4.42+dfsg-2ubuntu3.9","2.4.42+dfsg-2ubuntu3.10","2.4.42+dfsg-2ubuntu3.11","2.4.42+dfsg-2ubuntu3.12","2.4.42+dfsg-2ubuntu3.13","2.4.42+dfsg-2ubuntu3.13+esm1"]},{"source":"osv","ecosystem":"Ubuntu:Pro:18.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.45+dfsg-1ubuntu1.11+esm1"}]}],"versions":["2.4.45+dfsg-1ubuntu1","2.4.45+dfsg-1ubuntu1.1","2.4.45+dfsg-1ubuntu1.2","2.4.45+dfsg-1ubuntu1.3","2.4.45+dfsg-1ubuntu1.4","2.4.45+dfsg-1ubuntu1.5","2.4.45+dfsg-1ubuntu1.6","2.4.45+dfsg-1ubuntu1.7","2.4.45+dfsg-1ubuntu1.8","2.4.45+dfsg-1ubuntu1.9","2.4.45+dfsg-1ubuntu1.10","2.4.45+dfsg-1ubuntu1.11"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.4.49+dfsg-2ubuntu1.10"}]}],"versions":["2.4.48+dfsg-1ubuntu1","2.4.48+dfsg-1ubuntu2","2.4.48+dfsg-1ubuntu3","2.4.48+dfsg-1ubuntu4","2.4.49+dfsg-1ubuntu1","2.4.49+dfsg-2ubuntu1","2.4.49+dfsg-2ubuntu1.2","2.4.49+dfsg-2ubuntu1.3","2.4.49+dfsg-2ubuntu1.4","2.4.49+dfsg-2ubuntu1.5","2.4.49+dfsg-2ubuntu1.6","2.4.49+dfsg-2ubuntu1.7","2.4.49+dfsg-2ubuntu1.8","2.4.49+dfsg-2ubuntu1.9"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"openldap","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.5.16+dfsg-0ubuntu0.22.04.2"}]}],"versions":["2.5.6+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu1","2.5.11+dfsg-1~exp1ubuntu3","2.5.11+dfsg-1~exp1ubuntu3.1","2.5.12+dfsg-0ubuntu0.22.04.1","2.5.13+dfsg-0ubuntu0.22.04.1","2.5.14+dfsg-0ubuntu0.22.04.1","2.5.14+dfsg-0ubuntu0.22.04.2","2.5.15+dfsg-0ubuntu0.22.04.1","2.5.16+dfsg-0ubuntu0.22.04.1"]}],"products":[{"vendor":"apple","product":"macos"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"clustered_data_ontap"},{"vendor":"netapp","product":"h300s_firmware"},{"vendor":"netapp","product":"h410c_firmware"},{"vendor":"netapp","product":"h410s_firmware"},{"vendor":"netapp","product":"h500s_firmware"},{"vendor":"netapp","product":"h700s_firmware"},{"vendor":"netapp","product":"ontap_tools"},{"vendor":"openldap","product":"openldap"},{"vendor":"openldap foundation","product":"openldap"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518-4 pn/dp mfp"},{"vendor":"siemens","product":"simatic s7-1500 cpu 1518f-4 pn/dp mfp"},{"vendor":"siemens","product":"siplus s7-1500 cpu 1518-4 pn/dp mfp"}],"references":[{"url":"https://bugs.openldap.org/show_bug.cgi?id=9904","tags":["x_transferred","Issue Tracking","Vendor Advisory","advisory","web"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-2953","tags":["x_transferred","Third Party Advisory","report","advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20230703-0005/","tags":["x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT213843","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213844","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"https://support.apple.com/kb/HT213845","tags":["x_transferred","Third Party Advisory","advisory","web"]},{"url":"http://seclists.org/fulldisclosure/2023/Jul/52","tags":["mailing-list","x_transferred","Mailing List","discussion","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Jul/48","tags":["mailing-list","x_transferred","Mailing List","discussion","article"]},{"url":"http://seclists.org/fulldisclosure/2023/Jul/47","tags":["mailing-list","x_transferred","Mailing List","discussion","article"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-398330.html","tags":["web"]},{"url":"https://cert-portal.siemens.com/productcert/html/ssa-806742.html","tags":["web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-2953","tags":["web","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230703-0005"},{"url":"https://github.com/advisories/GHSA-26fx-c7cw-5jh4"},{"url":"https://access.redhat.com/errata/RHSA-2024:4264","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/2210651","tags":["report"]},{"url":"https://errata.almalinux.org/8/ALSA-2024-4264.html","tags":["advisory"]},{"url":"https://docs.bell-sw.com/security/cves/CVE-2023-2953","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu18_04-els/CLSA-2023-1688678407","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1689257597.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1689257904.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1689700365","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/ol6/CLSA-2023-1689702307.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/els6/CLSA-2023-1689702499.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/almalinux9.2-esu/CLSA-2023-1701444589.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2024-1722003515.html","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-27212","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/2xxx/CVE-2023-2953.json","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-2953","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2023-0252.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=32073","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6197-1","tags":["advisory"]},{"url":"https://www.openeuler.org/en/security/safety-bulletin/detail.html?id=openEuler-SA-2023-1334","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#low","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2210651","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_4264.json","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-2953","tags":["advisory","report"]},{"url":"https://access.redhat.com/errata/RHSA-2024:6033","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_6033.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8176","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8176.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2025:8181","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_8181.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2024:4264","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232483-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1211795","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2023-2953","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232484-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2023/suse-su-20232503-1/","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2023-2953","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-6616-1","tags":["advisory"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T00:00:00Z","modified":"2026-10-14T20:37:48.461Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"adp"}],"cwes":["CWE-476","CWE-476"],"updated_at":"2026-11-02T14:35:23.645864Z"}],"euvd":[{"id":"EUVD-2023-34399","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T00:00:00Z","modified":"2026-10-14T20:37:48Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T17:27:12.294621Z"}],"ghsa":[{"id":"GHSA-26fx-c7cw-5jh4","title":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in...","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-31T00:31:05Z","modified":"2026-10-14T21:32:45Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:13:28.606179Z"}],"nvd":[{"id":"CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T22:15:10.613Z","modified":"2026-10-14T21:17:15.61Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"primary"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T14:08:03.795015Z"}],"osv":[{"id":"AZL-27011","title":"CVE-2023-2953 affecting package openldap for versions less than 2.4.57-9","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T22:15:10Z","modified":"2026-04-21T04:24:00.614193Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:03.093433Z"},{"id":"BELL-CVE-2023-2953","status":"published","published":"2023-10-18T13:44:42.579925Z","modified":"2026-03-05T07:15:27.84634Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:28:17.742221Z"},{"id":"CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T00:00:00Z","modified":"2026-11-02T02:45:55.202240646Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"cwes":["CWE-476"],"updated_at":"2026-11-02T15:44:31.468318Z"},{"id":"DEBIAN-CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T22:15:10.613Z","modified":"2026-10-26T18:00:51.499350162Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:39.679062Z"},{"id":"OESA-2023-1334","title":"openldap security update","description":"OpenLDAP is an open source suite of LDAP (Lightweight Directory Access Protocol) applications and development tools. LDAP is a set of protocols for accessing directory services (usually phone book style information, but other information is possible) over the Internet, similar to the way DNS (Domain Name System) information is propagated over the Internet. The openldap package contains configuration files, libraries, and documentation for OpenLDAP.\r\n\r\nSecurity Fix(es):\r\n\r\nA vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.(CVE-2023-2953)","status":"published","published":"2023-06-10T11:05:48Z","modified":"2026-08-18T01:17:44.333784744Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:52:39.934788Z"},{"id":"RHSA-2024:4264","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-17T20:08:53Z","modified":"2026-06-26T12:22:22.95030875Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2024:6033","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2024-09-17T20:09:04Z","modified":"2026-06-26T12:22:23.204827562Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.03234Z"},{"id":"RHSA-2025:8176","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2025-05-27T10:03:20Z","modified":"2026-06-26T12:21:22.413227419Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RHSA-2025:8181","title":"Red Hat Security Advisory: openldap security update","status":"published","published":"2025-05-27T10:03:21Z","modified":"2026-06-26T12:22:40.626772744Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:17.634515Z"},{"id":"RLSA-2024:4264","title":"Low: openldap security update","description":"OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. \n\nSecurity Fix(es):\n\n* openldap: null pointer dereference in  ber_memalloc_x  function (CVE-2023-2953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2025-05-07T19:11:34.309952Z","modified":"2025-05-07T19:38:05.74794Z","cvss":[{"version":"3.1","score":7.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:24.923365Z"},{"id":"ROOT-OS-DEBIAN-11-CVE-2023-2953","title":"CVE-2023-2953 in openldap - Patched by Root","description":"Root has patched CVE-2023-2953 in the openldap package for Root:Debian:11. Multiple fixed versions available.","status":"published","published":"2026-08-23T12:52:01Z","modified":"2026-08-23T14:45:05.417137534Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:28.80888Z"},{"id":"ROOT-OS-DEBIAN-12-CVE-2023-2953","title":"CVE-2023-2953 in openldap - Patched by Root","description":"Root has patched CVE-2023-2953 in the openldap package for Root:Debian:12. Multiple fixed versions available.","status":"published","published":"2026-08-25T12:17:55Z","modified":"2026-08-26T01:12:44.287186375Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:30.70924Z"},{"id":"UBUNTU-CVE-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2023-05-30T22:15:00Z","modified":"2026-04-22T14:05:02.958788Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"},{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H","level":"high"}],"updated_at":"2026-11-02T16:54:20.997471Z"},{"id":"ALSA-2024:4264","title":"Low: openldap security update","description":"OpenLDAP is an open-source suite of Lightweight Directory Access Protocol (LDAP) applications and development tools. LDAP is a set of protocols used to access and maintain distributed directory information services over an IP network. \n\nSecurity Fix(es):\n\n* openldap: null pointer dereference in  ber_memalloc_x  function (CVE-2023-2953)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2024-07-02T00:00:00Z","modified":"2026-10-29T11:02:21.45485816Z","updated_at":"2026-11-02T15:27:52.553233Z"},{"id":"BIT-openldap-2023-2953","description":"A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.","status":"published","published":"2024-03-06T10:59:48.191Z","modified":"2026-09-08T08:48:24.535601749Z","updated_at":"2026-11-02T15:28:34.343258Z"},{"id":"CLSA-2023-1688678407","title":"Fix CVE(s): CVE-2023-2953","description":"\n   * SECURITY UPDATE: null pointer dereference in ber_memalloc_x()\n     - debian/patches/CVE-2023-2953.patch: added check for strdup failure in\n       ldif_open_url, ldap_url_parsehosts.\n     - CVE-2023-2953","status":"published","published":"2023-07-06T21:20:13Z","modified":"2026-06-04T10:03:12.355753Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1689257597","title":"openldap: Fix of CVE-2023-2953","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2023-07-13T14:13:23Z","modified":"2026-06-01T00:31:54.926351349Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1689257904","title":"openldap: Fix of CVE-2023-2953","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2023-07-13T14:18:28Z","modified":"2026-06-01T00:33:21.893245276Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1689700365","title":"Fix CVE(s): CVE-2023-2953","description":"\n   * SECURITY UPDATE: null pointer dereference in ber_memalloc_x()\n     - debian/patches/CVE-2023-2953.patch: added check for strdup failure in\n       ldif_open_url, ldap_url_parsehosts.\n     - CVE-2023-2953","status":"published","published":"2023-07-18T17:12:50Z","modified":"2026-06-04T10:03:19.672994Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1689702307","title":"openldap: Fix of CVE-2023-2953","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2023-07-18T17:45:12Z","modified":"2026-06-01T00:33:19.922551221Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1689702499","title":"openldap: Fix of CVE-2023-2953","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2023-07-18T17:48:24Z","modified":"2026-06-01T00:33:16.013755301Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1701444589","title":"openldap: Fix of CVE-2023-2953","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2023-12-01T15:29:53Z","modified":"2026-06-01T00:30:13.858252751Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2024-1722003515","title":"openldap: Fix of 2 CVEs","description":"- CVE-2023-2953: added check for strdup failure, to avoid null pointer dereference","status":"published","published":"2026-10-19T14:14:40Z","modified":"2026-10-26T09:31:37.117343101Z","updated_at":"2026-11-02T15:43:40.88185Z"},{"id":"MGASA-2023-0252","title":"Updated openldap packages fix security vulnerability","description":"Null pointer dereference in ber_memalloc_x() function (CVE-2023-2953)\n","status":"published","published":"2023-09-03T20:57:47Z","modified":"2026-04-16T04:40:41.212017304Z","updated_at":"2026-11-02T15:49:42.263076Z"},{"id":"openSUSE-SU-2024:13012-1","title":"libldap-data-2.6.4-2.1 on GA media","description":"These are all security issues fixed in the libldap-data-2.6.4-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:06:07.343482Z","updated_at":"2026-11-02T16:58:36.025801Z"},{"id":"SUSE-SU-2023:2483-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).\n","status":"published","published":"2023-06-12T06:47:16Z","modified":"2025-05-02T04:34:53.945784Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2484-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).\n","status":"published","published":"2023-06-12T06:53:00Z","modified":"2026-02-04T04:05:50.967264Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"SUSE-SU-2023:2503-1","title":"Security update for openldap2","description":"This update for openldap2 fixes the following issues:\n\n- CVE-2023-2953: Fixed null pointer deref in ber_memalloc_x (bsc#1211795).\n","status":"published","published":"2023-06-13T15:40:15Z","modified":"2026-02-04T02:46:45.412121Z","updated_at":"2026-11-02T15:53:53.019382Z"},{"id":"USN-6197-1","title":"openldap vulnerability","description":"It was discovered that OpenLDAP was not properly performing bounds checks\nwhen executing functions related to LDAP URLs. An attacker could possibly\nuse this issue to cause a denial of service.\n","status":"published","published":"2023-07-03T12:07:30Z","modified":"2026-06-29T13:50:54.265995291Z","updated_at":"2026-11-02T16:58:16.738762Z"},{"id":"USN-6616-1","title":"openldap vulnerability","description":"It was discovered that OpenLDAP was not properly performing bounds checks\nwhen executing functions related to LDAP URLs. An attacker could possibly\nuse this issue to cause a denial of service.\n","status":"published","published":"2024-01-30T12:42:51Z","modified":"2026-04-22T10:44:18.462699Z","updated_at":"2026-11-02T16:58:17.305935Z"}]}}