CVE-2025-14905
High · 7.2CVSS
7.2
EPSS
1.3%
Published
Feb 23, 2026
CISA due date
—
The record
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| SUSE:Linux Enterprise Server 15 SP6-LTSS | 389-ds | 0 | 2.2.10~git200.96444f3c3-150600.8.26.1 |
| SUSE:Linux Enterprise Server for SAP Applications 15 SP6 | 389-ds | 0 | 2.2.10~git200.96444f3c3-150600.8.26.1 |
| openSUSE:Leap 15.6 | 389-ds | 0 | 2.2.10~git200.96444f3c3-150600.8.26.1 |
| openSUSE:Leap 16.0 | 389-ds | 0 | 3.0.6~git249.6688af9b2-160000.1.1 |
| openSUSE:Tumbleweed | 389-ds | 0 | 3.1.4+e2562f589-1.1 |
Related vulnerabilities
- CVE-2024-5953 A denial of service vulnerability was found in the 389-ds-base LDAP server. Also affects 389-ds
- CVE-2024-3657 A flaw was found in 389-ds-base. Also affects 389-ds
- CVE-2024-2199 A denial of service vulnerability was found in 389-ds-base ldap server. Also affects 389-ds
- CVE-2024-1062 A heap overflow flaw was found in 389-ds-base. Also affects 389-ds
- CVE-2026-9064 A flaw was found in 389-ds-base. Also affects 389-ds
- CVE-2024-43806 Rustix is a set of safe Rust bindings to POSIX-ish APIs. Also affects 389-ds
- CVE-2024-6237 A flaw was found in the 389 Directory Server. Also affects 389-ds
- CVE-2022-0996 A vulnerability was found in the 389 Directory Server that allows expired passwords to… Also affects 389-ds