CVE-2023-2953

概要

参考情報

• seclists.org/fulldisclosure/2023/Jul/47 · Mailing List
• seclists.org/fulldisclosure/2023/Jul/48 · Mailing List
• seclists.org/fulldisclosure/2023/Jul/52 · Mailing List
• access.redhat.com/security/cve/CVE-2023-2953 · Third Party Advisory
• bugs.openldap.org/show_bug.cgi · Issue Tracking
• security.netapp.com/advisory/ntap-20230703-0005 · Third Party Advisory
• support.apple.com/kb/HT213843 · Third Party Advisory
• support.apple.com/kb/HT213844 · Third Party Advisory
• support.apple.com/kb/HT213845 · Third Party Advisory
• cert-portal.siemens.com/productcert/html/ssa-398330.html
• cert-portal.siemens.com/productcert/html/ssa-806742.html

openldap のその他の脆弱性

• CVE-2022-29155緊急 9.8In OpenLDAP 2.x before 2.5.12 and 2.6.x before 2.6.2, a SQL injection vulnerability exists in the experimental back-sql backend to slapd, vi…
• CVE-2020-25710高 7.5A flaw was found in OpenLDAP in versions before 2.4.56. This flaw allows an attacker who sends a malicious packet processed by OpenLDAP to f…
• CVE-2020-25709高 7.5A flaw was found in OpenLDAP. This flaw allows an attacker who can send a malicious packet to be processed by OpenLDAP’s slapd server, to tr…
• CVE-2021-27212高 7.5In OpenLDAP through 2.4.57 and 2.5.x through 2.5.1alpha, an assertion failure in slapd can occur in the issuerAndThisUpdateCheck function vi…
• CVE-2020-36230高 7.5A flaw was discovered in OpenLDAP before 2.4.57 leading in an assertion failure in slapd in the X.509 DN parsing in decode.c ber_next_elemen…