Junglewise Threat Intelligence

CVE-2025-14905: Red Hat 389-ds-base heap buffer overflow in schema_attr_enum_callback

CVE-2025-14905 · Severity: high · CVSS 7.2 · Published 2026-02-23

Technologies: Red Hat Enterprise Linux, Red Hat 389-Ds-Base. Vendors: Red Hat.

Executive brief

A security vulnerability has been identified in the 389 Directory Server, an enterprise-grade tool used to manage user identities and access across a network. An attacker with high-level administrative privileges could exploit this flaw to crash the server or potentially execute malicious code. This could lead to a total service outage or unauthorized access to sensitive directory data.

Technical details

A heap-based buffer overflow (CWE-122) exists in the schema_attr_enum_callback function within schema.c of the 389-ds-base server. The vulnerability is caused by an incorrect buffer size calculation that sums alias string lengths without accounting for necessary formatting characters. A remote attacker with high privileges (PR:H) can trigger this overflow by processing a large number of aliases. Successful exploitation could result in a crash of the LDAP service or arbitrary code execution. Red Hat has released security updates (e.g., RHSA-2026:3189, RHSA-2026:3208) to address this issue across various versions of RHEL and Directory Server.

Affected products

  • Red Hat 389-ds-base 3.1.3-7.el10_1, 2.7.0-10.el9_7
  • Red Hat Red Hat Directory Server 11.5, 11.7, 11.9, 12.2, 12.4
  • Red Hat Red Hat Enterprise Linux 8, 9, 10

Timeline

  • 2025-02-23: disclosed: CVE published date
  • 2026-02-24: patched: Red Hat released security advisories and updated packages

References

Related threats