CVE-2023-2953: Apple macOS

High severity, CVSS 7.5. EPSS: 1.9% chance of exploitation in the next 30 days.

A vulnerability was found in openldap. This security flaw causes a null pointer dereference in ber_memalloc_x() function.

Affected products

• Apple macOS: from 11.0, before 11.7.9 (fixed in 11.7.9); from 12.0, before 12.6.8 (fixed in 12.6.8); from 13.0, before 13.5 (fixed in 13.5)
• Netapp Active Iq Unified Manager: affected versions not specified
• Netapp Clustered Data Ontap: affected versions not specified
• Netapp h300s Firmware: affected versions not specified
• Netapp h410c Firmware: affected versions not specified
• Netapp h410s Firmware: affected versions not specified
• Netapp h500s Firmware: affected versions not specified
• Netapp h700s Firmware: affected versions not specified
• Netapp Ontap Tools: affected versions not specified
• Openldap Openldap: version 2.4 only
• Red Hat Enterprise Linux: version 8.0 only; version 9.0 only

Published 2023-05-30. Last modified 2026-06-17.