7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2023-2953

CVE-2023-2953: A vulnerability was found in openldap. This security flaw causes a null pointer dereference in...

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2023-2953

CVE-2023-2953:

7.5

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability description states a NULL pointer dereference related to ber_memalloc_x(). I analyzed the provided bug tracker URL (https://bugs.openldap.org/show_bug.cgi?id=9904) which pointed to two commits: ea8dd2d2 and 3f2abd0b. I fetched the information for these commits.

Commit ea8dd2d2 modifies libraries/libldap/fetch.c, adding a NULL check after a call to ber_strdup() within the ldif_open_url function. This implies ber_strdup() could return NULL (if ber_memalloc_x or equivalent fails) and ldif_open_url was previously vulnerable to dereferencing this NULL pointer.

Commit 3f2abd0b modifies libraries/libldap/url.c, adding a NULL check after a call to LDAP_STRDUP() within the ldap_url_parsehosts function. This implies LDAP_STRDUP() could also return NULL, and ldap_url_parsehosts was previously vulnerable to dereferencing this NULL pointer.

Both ber_strdup and LDAP_STRDUP are string duplication functions that would rely on underlying memory allocation functions like ber_memalloc_x. The vulnerability lies in the calling functions (ldif_open_url and ldap_url_parsehosts) not checking the return values of these allocation/duplication functions before using them, thus leading to a potential NULL pointer dereference if the allocation failed.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.