CVE-2025-14905: 389-ds-base Heap-based Buffer Overflow

CVSS: 7.2v3.1HighDeferred

AliasesSUSE-SU-2026:0913-1SUSE-SU-2026:0914-1SUSE-SU-2026:0915-1+23 more

Published 23-02-2026Last modified 29-06-2026

Vulnerability summary

CVE-2025-14905 is a high (CVSS 7.2) Heap-based Buffer Overflow vulnerability in 389-ds-base. EPSS estimates a 1.21% chance of exploitation in the next 30 days, higher than 67.9% of scored vulnerabilities.

Overall risk

29/100

0100

Medium · default modelHow is this calculated?

CVSS score

7.2/10

010

High · v3.1 (CVE.org)

EPSS score

1.21%

0%100%

Low · +0.07 pp in 30 days

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

23-02-2026
PublishedVulnerability first disclosed.
29-06-2026
Last modifiedVulnerability information updated.

Description

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).

CVSS metrics

5 scores · 5 sources · 1 version

v3.17.2

EPSS trend

Probability

1.21%

Chance of exploitation in the next 30 days

Percentile

68%

Versus all other CVEs

30-day change

+0.07 pp

From 1.14% on 20-09-2026

20-09-202620-10-2026

EPSS score

1.21%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-122Heap-based Buffer OverflowA heap overflow condition is a buffer overflow, where the buffer that can be overwritten is allocated in the heap portion of memory, generally meaning that the buffer was allocated using a routine such as malloc().

Affected systems

Redhat14 products

389-ds-base< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.3.11.1-11.el7_9 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-bdb< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0
389-ds-base-bdb-debuginfo< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0
389-ds-base-debuginfo< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.3.11.1-11.el7_9 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-debugsource< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc

389-ds-base-devel< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:1.3.11.1-11.el7_9 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-legacy-tools< 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-legacy-tools-debuginfo< 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-libs< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.3.11.1-11.el7_9 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-libs-debuginfo< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-snmp< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:1.3.11.1-11.el7_9 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
389-ds-base-snmp-debuginfo< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc
cockpit-389-ds< 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f
python3-lib389< 0:3.1.3-7.el10_1 | < 0:3.0.6-17.el10_0 | < 0:2.6.1-20.el9_6 | < 0:2.4.5-22.module+el9dsrv+24021+288fb6da | < 0:2.4.5-24.el9_4 | < 0:2.7.0-10.el9_7 | < 0:1.4.2.4-19.module+el8.2.0+24058+ed9808c7 | < 0:1.4.3.34-8.module+el8.6.0+24051+60483925 | < 0:1.4.3.34-5.module+el8dsrv+24053+0eac3b1a | < 0:1.4.3.39-23.module+el8.10.0+24085+b368a310 | < 0:1.4.3.39-21.module+el8dsrv+24083+d25fcbb4 | < 0:1.4.3.34-14.module+el8dsrv+24041+386df666 | < 0:2.2.7-14.module+el9dsrv+24059+d750c81f | < 0:1.4.3.35-17.module+el8.8.0+24040+93041464 | < 0:2.0.14-5.el9_0 | < 0:2.2.4-17.el9_2 | < 0:1.4.3.34-3.module+el8.4.0+24054+665bc8dc

Show all 14

Suse9 products

389-ds&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS< 2.2.10~git200.96444f3c3-150500.3.42.1
389-ds&distro=SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS< 2.2.10~git200.96444f3c3-150500.3.42.1
389-ds&distro=SUSE Linux Enterprise Module for Server Applications 15 SP7< 2.7.0~git144.f597a91d8-150700.3.13.1
389-ds&distro=SUSE Linux Enterprise Server 15 SP5-LTSS< 2.2.10~git200.96444f3c3-150500.3.42.1
389-ds&distro=SUSE Linux Enterprise Server 15 SP6-LTSS< 2.2.10~git200.96444f3c3-150600.8.26.1

Show all 9

Opensuse3 products

389-ds&distro=openSUSE Leap 15.6< 2.2.10~git200.96444f3c3-150600.8.26.1
389-ds&distro=openSUSE Leap 16.0< 3.0.6~git249.6688af9b2-160000.1.1
389-ds&distro=openSUSE Tumbleweed< 3.1.4+e2562f589-1.1

Debian1 product

389-ds-baseAll versions (No fix recorded) | < 3.1.2+dfsg1-1+deb13u1

Ubuntu1 product

389-ds-baseAll versions (No fix recorded)

5 vendors · 28 products

References

54 links

access.redhat.com/errata/RHSA-2026:3189Vendor AdvisoryX Refsource REDHATAdvisoryREPORT
access.redhat.com/errata/RHSA-2026:3208Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:3379Vendor AdvisoryX Refsource REDHAT
access.redhat.com/errata/RHSA-2026:3504Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:4207Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:4661Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:4720Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5196Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5511Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5512Vendor AdvisoryX Refsource REDHATAdvisory

Show all 54 references

access.redhat.com/errata/RHSA-2026:5513Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5514Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5568Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5569Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5576Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5597Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:5598Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:6220Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/errata/RHSA-2026:6268Vendor AdvisoryX Refsource REDHATAdvisory
access.redhat.com/security/cve/CVE-2025-14905VDB EntryX Refsource REDHATREPORT
bugzilla.redhat.com/show_bug.cgi?id=2423624Issue TrackingX Refsource REDHATREPORT
www.suse.com/support/update/announcement/2026/suse-su-20260913-1/Advisory
bugzilla.suse.com/1258727REPORT
www.suse.com/security/cve/CVE-2025-14905WEB
www.suse.com/support/update/announcement/2026/suse-su-20260914-1/Advisory
www.suse.com/support/update/announcement/2026/suse-su-20260915-1/Advisory
bugzilla.suse.com/1258689REPORT
www.suse.com/support/update/announcement/2026/suse-su-202620927-1/Advisory
access.redhat.com/security/updates/classification/ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3189.jsonAdvisory
www.cve.org/CVERecord?id=CVE-2025-14905AdvisoryREPORT
nvd.nist.gov/vuln/detail/CVE-2025-14905Advisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3208.jsonAdvisory
issues.redhat.com/browse/RHEL-140090ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_3504.jsonAdvisory
issues.redhat.com/browse/RHEL-140087ARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4207.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4661.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_4720.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5196.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5511.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5512.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5513.jsonAdvisory
docs.redhat.com/en/documentation/red_hat_directory_server/11/html/release_notes/indexARTICLE
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5514.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5568.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5569.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5576.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5597.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_5598.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6220.jsonAdvisory
security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_6268.jsonAdvisory
ubuntu.com/security/CVE-2025-14905REPORT
security-tracker.debian.org/tracker/CVE-2025-14905Advisory

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References

Related vulnerabilities