CLSA-2023-1689700365 Fix CVE(s): CVE-2023-2953

🗓️ 18 Jul 2023 17:12:50Reported by GoogleType

osv🔗 osv.dev👁 5 Views

Security update fixes null pointer in ber_memalloc_x by adding strdup failure checks in ldif_open_url and ldap_url_parsehosts.

Reporter	Title	Published	Views	Family All 158
IBM Security Bulletins	Security Bulletin: IBM Guardium Data Security Center is affected by multiple vulnerabilities	19 Jun 202505:35	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Base OS issues	28 Aug 202521:17	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	4 Feb 202520:41	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	6 Aug 202516:37	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM webMethods Managed File Transfer	25 Apr 202510:53	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple Operator package issues	28 Aug 202521:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Security Verify Governance has multiple vulnerabilities	27 Aug 202516:52	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerability found in openldap package shipped with IBM CICS TX Advanced 10.1	24 May 202414:15	–	ibm
ATTACKERKB	CVE-2023-2953	30 May 202322:15	–	attackerkb
Tenable Nessus	Amazon Linux 2023 : openldap, openldap-clients, openldap-compat (ALAS2023-2023-219)	28 Jun 202300:00	–	nessus

Source	Link
errata	www.errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1689700365

04 Jun 2026 09:46Current

6.9Medium risk

Vulners AI Score6.9

CVSS 3.17.5

EPSS0.01947

SSVC