7.5

CVE-2023-2953: apple macos NULL Pointer Dereference

CVSS: 7.5v3.1HighModified
AliasesMGASA-2023-0252SUSE-SU-2023:2483-1SUSE-SU-2023:2484-1
Published 30-05-2023Last modified 14-10-2026
Open JSON

Vulnerability summary

CVE-2023-2953 is a high (CVSS 7.5) NULL Pointer Dereference vulnerability in apple macos. EPSS estimates a 2.00% chance of exploitation in the next 30 days, higher than 80.4% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v3.1 (CVE.org)
EPSS score
2.00%
0%100%
Low · +0.05 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Timeline

  1. 30-05-2023
    PublishedVulnerability first disclosed.
  2. 14-10-2026
    Last modifiedVulnerability information updated.

Description

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

2.00%

Chance of exploitation in the next 30 days

Percentile

80%

Versus all other CVEs

30-day change

+0.05 pp

From 1.95% on 19-09-2026

19-09-202619-10-2026
EPSS score
2.00%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse14 products
  • openldap2&distro=SUSE Linux Enterprise Micro 5.1< 2.4.46-150200.14.14.1
  • openldap2&distro=SUSE Linux Enterprise Micro 5.2< 2.4.46-150200.14.14.1
  • openldap2&distro=SUSE Linux Enterprise Micro 5.3< 2.4.46-150200.14.14.1
  • openldap2&distro=SUSE Linux Enterprise Micro 5.4< 2.4.46-150200.14.14.1
  • openldap2&distro=SUSE Linux Enterprise Module for Basesystem 15 SP4< 2.4.46-150200.14.14.1
Redhat11 products
  • enterprise_linux8.0 | 9.0
  • openldap< 0:2.4.46-19.el8_10 | < 0:2.4.46-20.el8_8 | < 0:2.6.2-1.el9_0.1 | < 0:2.6.2-3.el9_2.1
  • openldap-clients< 0:2.4.46-19.el8_10 | < 0:2.4.46-20.el8_8 | < 0:2.6.2-1.el9_0.1 | < 0:2.6.2-3.el9_2.1
  • openldap-clients-debuginfo< 0:2.4.46-19.el8_10 | < 0:2.4.46-20.el8_8 | < 0:2.6.2-1.el9_0.1 | < 0:2.6.2-3.el9_2.1
  • openldap-compat< 0:2.6.2-1.el9_0.1 | < 0:2.6.2-3.el9_2.1
Netapp8 products
Opensuse3 products
  • openldap2&distro=openSUSE Leap 15.4< 2.4.46-150200.14.14.1
  • openldap2&distro=openSUSE Leap 15.5< 2.4.46-150200.14.14.1
  • openldap2&distro=openSUSE Leap Micro 5.3< 2.4.46-150200.14.14.1
Apple1 product
  • macos≥ 11.0, < 11.7.9 | ≥ 12.0, < 12.6.8 | ≥ 13.0, < 13.5
Debian1 product
  • openldapAll versions (No fix recorded) | < 2.5.16+dfsg-1
Mageia1 product
  • openldap< 2.4.57-1.3.mga8
Openldap1 product
Ubuntu1 product
  • openldap< 2.4.31-1+nmu2ubuntu8.5+esm6 | < 2.4.42+dfsg-2ubuntu3.13+esm2 | < 2.4.45+dfsg-1ubuntu1.11+esm1 | < 2.4.49+dfsg-2ubuntu1.10 | < 2.5.16+dfsg-0ubuntu0.22.04.2

9 vendors · 41 products

References

34 links
Show all 34 references