Skip to main content
cve.nowby Sazabi
← All vulnerabilities
CVE-2025-14905

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Published
Last modified
published
Not listed in CISA KEV
None on Exploit-DB, Metasploit or GitHub
  • Exploitation: none
  • Automatable: no
  • Technical impact: total

Summary

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).

Timeline

  1. CVE published
  2. CISA SSVC assessment

    Exploitation: none · Automatable: no · Technical impact: total

  3. Record last updated

Affected versions

  • redhat-ds:11

    Version range not reported

  • redhat-ds:11

    Version range not reported

  • redhat-ds:11

    Version range not reported

  • redhat-ds:12

    Version range not reported

  • redhat-ds:12

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds:1.4

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • dirsrv/dirsrv-container-rhel10

    Version range not reported

  • redhat-ds:12/389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

  • 389-ds-base

    Version range not reported

References 21

access.redhat.com

bugzilla.redhat.com