A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-develUpgrade openldap-clients | Jul 4, 2024 | May 30, 2023 |
| Amazon Linux Ami 2 | — | Upgrade openldap-clientsUpgrade openldap-develUpgrade openldap-debuginfoUpgrade openldapUpgrade openldap-servers-sqlUpgrade openldap-servers | Jul 4, 2023 | May 30, 2023 |
| Amazon_linux | — | Upgrade openldap | Aug 23, 2023 | May 30, 2023 |
| Amazon_linux_2023 | — | Upgrade openldap-develUpgrade openldap-clientsUpgrade openldap-servers-debuginfoUpgrade openldap-compatUpgrade openldap-serversUpgrade openldap-compat-debuginfoUpgrade openldap-debugsourceUpgrade openldap-debuginfoUpgrade openldapUpgrade openldap-clients-debuginfo | Feb 17, 2025 | May 29, 2023 |
| Apple Osx Openldap | — | Upgrade macOS to the latest version | Jul 25, 2023 | May 30, 2023 |
| Debian | — | Upgrade openldapNo solution exists | May 15, 2025 | May 30, 2023 |
| F5 Big Ip | — | Update F5 BIG-IP to the latest version | Jun 17, 2026 | Mar 5, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade openldapUpgrade openldap-clientsUpgrade openldap-servers | Jan 10, 2024 | May 30, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade openldap-clientsUpgrade openldap-serversUpgrade openldap | Jan 10, 2024 | May 30, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade openldapUpgrade openldap-serversUpgrade openldap-clientsUpgrade openldap-devel | Jan 10, 2024 | May 30, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade openldap-serversUpgrade openldap-clientsUpgrade openldap | Aug 9, 2023 | May 30, 2023 |
| Oracle_linux | — | Upgrade openldap-serversUpgrade openldapUpgrade openldap-clientsUpgrade openldap-devel | Jul 3, 2024 | May 29, 2023 |
| Redhat_linux | — | Upgrade openldap-servers-debuginfoUpgrade openldapUpgrade openldap-serversUpgrade openldap-debuginfoNo solution existsUpgrade openldap-debugsourceUpgrade openldap-compatUpgrade openldap-compat-debuginfoUpgrade openldap-clients-debuginfoUpgrade openldap-clientsUpgrade openldap-devel | Jul 3, 2024 | May 30, 2023 |
| Rocky_linux | — | Upgrade openldap-debugsourceUpgrade openldapUpgrade openldap-serversUpgrade openldap-servers-debuginfoUpgrade openldap-develUpgrade openldap-clientsUpgrade openldap-clients-debuginfoUpgrade openldap-debuginfo | May 8, 2025 | May 30, 2023 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.3.1Upgrade Splunk Enterprise to version 9.2.3Upgrade Splunk Enterprise to version 9.1.6 | Sep 30, 2025 | May 30, 2023 |
| Suse | — | Upgrade openldap2-docUpgrade openldap2-back-metaUpgrade openldap2-devel-staticUpgrade openldap2-back-sqlUpgrade compat-libldap-2_3-0Upgrade openldap2-back-sockUpgrade openldap2-develUpgrade openldap2-clientUpgrade libldap-2_4-2-32bitUpgrade openldap2-back-perlUpgrade openldap2-ppolicy-check-passwordUpgrade libldap-2_4-2Upgrade openldap2Upgrade openldap2-devel-32bitUpgrade libldap-dataUpgrade openldap2-contrib | Jun 13, 2023 | May 30, 2023 |
| Ubuntu | — | Upgrade slapdUpgrade slapd (Ubuntu Pro) | Jul 4, 2023 | May 30, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 30, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub