{"id":"CVE-2025-14905","title":"A flaw was found in the 389-ds-base server","summary":"A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summin…","severity":"high","cvss":7.2,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","cwe":["CWE-122"],"published":"2026-02-23","updated":"2026-06-25","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-14905","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:3189","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:3208","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:3379","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:3504","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:4207","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:4661","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:4720","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5196","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5511","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5512","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5513","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5514","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5568","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5569","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5576","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5597","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:5598","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:6220","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:6268","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2025-14905","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2423624","label":"secalert@redhat.com"}],"tags":["nvd"],"epss":0.01182,"epssPercentile":0.66393,"ingestedAt":"2026-06-29T13:24:34.642Z","slug":"CVE-2025-14905","body":"## Overview\n\nA flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":40,"depthScoreParts":{"impact":39.6,"likelihood":0.2,"exploitation":0,"ransomware":0},"changes":[]}