Medium ALAS2023-2023-219 1 CVE

Moderate: openldap security update (Amazon Linux 2023)

Published Jun 21, 2023 · Updated Jun 27, 2023

Ecosystem: Amazon Linux

Summary

Package updates are available for Amazon Linux 2023 that fix the following vulnerabilities: CVE-2023-2953: A vulnerability was found in openldap that can cause a null pointer dereference in the ber_memalloc_x() function.

Fixed packages 10

Release	Package	Fixed in
Amazon Linux · 2023	openldap	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-clients	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-clients-debuginfo	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-compat	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-compat-debuginfo	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-debuginfo	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-debugsource	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-devel	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-servers	0:2.4.57-6.amzn2023.0.5
Amazon Linux · 2023	openldap-servers-debuginfo	0:2.4.57-6.amzn2023.0.5

Vulnerabilities 1

High 7.5

CVE-2023-2953

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() functio…

openldap openldap openldap Debian Ubuntu Azure Linux

May 30, 2023

References

web
https://alas.aws.amazon.com/cve/html/CVE-2023-2953.html