PT-2026-21524 · Unknown+1 · 389-Ds-Base+1
Red Hat
·
Published
2025-01-01
·
Updated
2026-04-08
·
CVE-2025-14905
CVSS v3.1
7.2
High
| Vector | AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions: 389 Directory Server versions prior to 3.0.6~git249.6688af9b2.
Description: A heap buffer overflow vulnerability exists in the
schema attr enum callback function within the schema.c file of 389 Directory Server. This occurs because the code incorrectly calculates the buffer size when processing alias strings, potentially leading to a heap overflow. A remote attacker could exploit this vulnerability to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).Recommendations: Upgrade to version 3.0.6~git249.6688af9b2 or later.
Fix
DoS
RCE
Heap Based Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
389-Ds-Base
Rocky Linux