Vulnerability-Lookup

OPENSUSE-SU-2026:20415-1

Vulnerability from csaf_opensuse - Published: 2026-03-24 17:50 - Updated: 2026-03-24 17:50

Summary

Security update for 389-ds

Severity

Important

Notes

Title of the patch: Security update for 389-ds

Description of the patch: This update for 389-ds fixes the following issue: Update to 389-ds 3.0.6~git249.6688af9b2: - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS and RCE (bsc#1258727). Changelog: * Issue 7277 - UI - Fix Japanese translation for "Successfully updated group" in Cockpit UI (#7278) * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276) * Issue 7279 - UI - Fix typo in export certificate dialog (#7280) * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs * Issue 7271 - plugins that create threads need to update active thread count * Issue 5853 - Update concread to 0.5.10 * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064) * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264) * Issue 7066/7052 - allow password history to be set to zero and remove history * Issue 7223 - Use lexicographical order for ancestorid (#7256) * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258) * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257) * Issue - CLI - dsctl db2index needs some hardening with MBD * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232) * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212) * Issue 6947 - Fix health_system_indexes_test.py * Issue 7076 - Fix revert_cache() never called in modrdn (#7220) * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077) * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7205) * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228) * Issue 7223 - Add dsctl index-check command for offline index repair * Issue 7223 - Detect and log index ordering mismatch during backend startup * Issue 7223 - Add upgrade function to remove ancestorid index config entry * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid * Issue 7223 - Revert index scan limits for system indexes * Issue 6542 - RPM build errors on Fedora 42 * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225) * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195) * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214) * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211) * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated * Issue 7198 - Web console doesn't show sub-suffix when parent-suffix points to an entry (#7202) * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203) * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180) * Issue 7172 - Index ordering mismatch after upgrade (#7173) * Issue - Revise paged result search locking * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large database (#7145) * Revert "Issue 7160 - Add lib389 version sync check to configure (#7165)" * Issue 7160 - Add lib389 version sync check to configure (#7165) * Issue 7049 - RetroCL plugin generates invalid LDIF * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151) * Restore definition for slapi_entry_attr_get_valuearray * Issue 1793 - RFE - Dynamic lists - UI and CLI updates * Issue 7119 - Fix DNA shared config replication test (#7143) * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086) * Issue 1793 - RFE - Implement dynamic lists * Issue 6753 - Port ticket tests * Issue 6753 - Port and fix ticket 47823 tests * Issue 6753 - Add 'add_exclude_subtree' and 'remove_exclude_subtree' methods to Attribute uniqueness plugin * Issue 6753 - Port ticket test 48026 * Issue 7128 - memory corruption in alias entry plugin (#7131) * Issue 7091 - Duplicate local password policy entries listed (#7092) * Issue 7124 - BDB cursor race condition with transaction isolation (#7125) * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133) * Issue 7121 - LeakSanitizer: various leaks during replication (#7122) * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116) * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114) * Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120) * Issue 7084 - UI - schema - sorting attributes breaks expanded row * Issue 7007 - Improve paged result search locking * Issue 3555 - UI - Fix audit issue with npm - glob (#7107) * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026) * Issue 6901 - Update changelog trimming logging - fix tests * Issue 6901 - Update changelog trimming logging * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097) * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094) * Issue 7055 - Online initialization of consumers fails with error -23 (#7075) * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043) * Issue 7078 - audit json logging does not encode binary values * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070) * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062) * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068) * Issue 7071 - search filter (&(cn:dn:=groups)) no longer returns results * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074) * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list * Issue 7059 - UI - unable to upload pem file * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036) * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048) * Issue 7044 - RFE - index sudoHost by default (#7046) * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980) * Issue 7035 - RFE - memberOf - adding scoping for specific groups * Issue - CLI/UI - Add option to delete all replication conflict entries * Issue 7033 - lib389 - basic plugin status not in JSON * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028) * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967) * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968) * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983) * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022) * Issue 6954 - do not delete referrals on chain_on_update backend * Issue 7018 - BUG - prevent stack depth being hit (#7019) * Issue 6928 - The parentId attribute is indexed with improper matching rule * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup task by default (#6935) * Issue 6904 - Fix config_test.py::test_lmdb_config * Issue 7014 - memberOf - ignored deferred updates with LMDB * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013) * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996) * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991) * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889) * Issue 6985 - Some logconv CI tests fail with BDB (#6986) * Issue 6891 - JSON logging - add wrapper function that checks for NULL * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978) * Issue 6956 - More UI fixes * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks * Issue 6805 - RFE - Multiple backend entry cache tuning * Issue 6843 - Add CI tests for logconv.py (#6856) * Issue - UI - update Radio handlers and LDAP entries last modified time * Issue 6660 - UI - Fix minor typo (#6955) * Issue 6910 - Fix latest coverity issues * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten... (#6920) * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883) * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941) * Issue 6936 - Make user/subtree policy creation idempotent (#6937) * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status * Issue 6848 - AddressSanitizer: leak in do_search * Issue 6850 - AddressSanitizer: memory leak in mdb_init * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2 * Issue 6778 - Memory leak in roles_cache_create_object_from_entry * Issue 6181 - RFE - Allow system to manage uid/gid at startup * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914) * Issue 6768 - ns-slapd crashes when a referral is added (#6780) * Issue 6468 - CLI - Fix default error log level * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353) * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898) * Issue 6884 - Mask password hashes in audit logs (#6885) * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862) * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821) * Issue 6895 - Crash if repl keep alive entry can not be created * Issue 6893 - Log user that is updated during password modify extended operation * Issue 6772 - dsconf - Replicas with the "consumer" role allow for viewing and modification of their changelog. (#6773) * Issue 6888 - Missing access JSON logging for TLS/Client auth * Issue 6680 - instance read-only mode is broken (#6681) * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879) * Issue 6872 - compressed log rotation creates files with world readable permission * Issue 6859 - str2filter is not fully applying matching rules * Issue 6868 - UI - schema attribute table expansion break after moving to a new page * Issue 6854 - Refactor for improved data management (#6855) * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757) * Issue 6857 - uiduniq: allow specifying match rules in the filter * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9 * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823) * Issue 6782 - Improve paged result locking * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre... (#6826) * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742) * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy * Issue 6553 - Update concread to 0.5.6 (#6824) * Issue 1081 - Add a CI test (#6063) * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN * Issue 6791 - crash in liblmdb during instance shutdown (#6793) * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643) * Issue 6776 - Enabling audit log makes slapd coredump * Issue 6534 - CI fails with Fedora 41 and DNF5 * Issue 6787 - Improve error message when bulk import connection is closed * Issue 6727 - RFE - database compaction interval should be persistent * Issue 6438 - Add basic dsidm organizational unit tests * Issue 6439 - Fix dsidm service get_dn option * Issue 5120 - ns-slapd doesn't start in referral mode (#6763)

Patchnames: openSUSE-Leap-16.0-434

CVE-2025-14905

7.2 (High)


                
                  CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected products

Recommended 20 products

Product	Version	Remediation
Unresolved product id: openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x	—	Vendor Fix
Unresolved product id: openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64	—	Vendor Fix

Threats

Impact important

References

6 references

URL	Category
https://www.suse.com/support/security/rating/	external
https://ftp.suse.com/pub/projects/security/csaf/o…	self
https://bugzilla.suse.com/1258727	self
https://www.suse.com/security/cve/CVE-2025-14905/	self
https://www.suse.com/security/cve/CVE-2025-14905	external
https://bugzilla.suse.com/1258727	external

JSON

To clipboard

{
  "document": {
    "aggregate_severity": {
      "namespace": "https://www.suse.com/support/security/rating/",
      "text": "important"
    },
    "category": "csaf_security_advisory",
    "csaf_version": "2.0",
    "distribution": {
      "text": "Copyright 2024 SUSE LLC. All rights reserved.",
      "tlp": {
        "label": "WHITE",
        "url": "https://www.first.org/tlp/"
      }
    },
    "lang": "en",
    "notes": [
      {
        "category": "summary",
        "text": "Security update for 389-ds",
        "title": "Title of the patch"
      },
      {
        "category": "description",
        "text": "This update for 389-ds fixes the following issue:\n\nUpdate to 389-ds 3.0.6~git249.6688af9b2:\n\n- CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback` can lead to DoS\n  and RCE (bsc#1258727).\n\nChangelog:\n\n * Issue 7277 - UI - Fix Japanese translation for \"Successfully updated group\" in Cockpit UI (#7278)\n * Issue 7275 - UI - Improve password policy field validation in Cockpit UI (#7276)\n * Issue 7279 - UI - Fix typo in export certificate dialog (#7280)\n * Issue 7273 - In a chaining environment binding as remote user causes an invalid error in the logs\n * Issue 7271 - plugins that create threads need to update active thread count\n * Issue 5853 - Update concread to 0.5.10\n * Issue 7053 - Remove memberof_del_dn_from_groups from MemberOf plugin (#7064)\n * Issue 7223 - Remove integerOrderingMatch requirement for parentid (#7264)\n * Issue 7066/7052 - allow password history to be set to zero and remove history\n * Issue 7223 - Use lexicographical order for ancestorid (#7256)\n * Issue 7213 - (2nd) MDB_BAD_VALSIZE error while handling VLV (#7258)\n * Issue 7184 - (2nd) argparse.HelpFormatter _format_actions_usage() is deprecated (#7257)\n * Issue - CLI - dsctl db2index needs some hardening with MBD\n * Issue 7248 - CLI - attribute uniqueness - fix usage for exclude subtree option\n * Issue 7231 - Sync repl tests fail in FIPS mode due to non FIPS compliant crypto (#7232)\n * Issue 7121 - (2nd) LeakSanitizer: various leaks during replication (#7212)\n * Issue 6947 - Fix health_system_indexes_test.py\n * Issue 7076 - Fix revert_cache() never called in modrdn (#7220)\n * Issue 7076, 6992, 6784, 6214 - Fix CI test failures (#7077)\n * Issue 7096 - (2nd) During replication online total init the function idl_id_is_in_idlist is not scaling with large\n   database (#7205)\n * Issue 3555 - UI - Fix audit issue with npm - @isaacs/brace-expansion (#7228)\n * Issue 7223 - Add dsctl index-check command for offline index repair\n * Issue 7223 - Detect and log index ordering mismatch during backend startup\n * Issue 7223 - Add upgrade function to remove ancestorid index config entry\n * Issue 7223 - Add upgrade function to remove nsIndexIDListScanLimit from parentid\n * Issue 7223 - Revert index scan limits for system indexes\n * Issue 6542 - RPM build errors on Fedora 42\n * Issue 7224 - CI Test - Simplify test_reserve_descriptor_validation (#7225)\n * Issue 7194 - Repl Log Analysis - Add CSN propagation details (#7195)\n * Issue 7213 - MDB_BAD_VALSIZE error while handling VLV (#7214)\n * Issue 7027 - (2nd) 389-ds-base OpenScanHub Leaks Detected (#7211)\n * Issue 7184 - argparse.HelpFormatter _format_actions_usage() is deprecated\n * Issue 7198 - Web console doesn\u0027t show sub-suffix when parent-suffix points to an entry (#7202)\n * Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits\n * Bump lodash from 4.17.21 to 4.17.23 in /src/cockpit/389-console (#7203)\n * Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180)\n * Issue 7172 - Index ordering mismatch after upgrade (#7173)\n * Issue - Revise paged result search locking\n * Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with large\n   database (#7145)\n * Revert \"Issue 7160 - Add lib389 version sync check to configure (#7165)\"\n * Issue 7160 - Add lib389 version sync check to configure (#7165)\n * Issue 7049 - RetroCL plugin generates invalid LDIF\n * Issue 7150 - Compressed access log rotations skipped, accesslog-list out of sync (#7151)\n * Restore definition for slapi_entry_attr_get_valuearray\n * Issue 1793 - RFE - Dynamic lists - UI and CLI updates\n * Issue 7119 - Fix DNA shared config replication test (#7143)\n * Issue 7081 - Repl Log Analysis - Implement data sampling with performance and timezone fixes (#7086)\n * Issue 1793 - RFE - Implement dynamic lists\n * Issue 6753 - Port ticket tests\n * Issue 6753 - Port and fix ticket 47823 tests\n * Issue 6753 - Add \u0027add_exclude_subtree\u0027 and \u0027remove_exclude_subtree\u0027 methods to Attribute uniqueness plugin\n * Issue 6753 - Port ticket test 48026\n * Issue 7128 - memory corruption in alias entry plugin (#7131)\n * Issue 7091 - Duplicate local password policy entries listed (#7092)\n * Issue 7124 - BDB cursor race condition with transaction isolation (#7125)\n * Issue 7132 - Keep alive entry updated too soon after an offline import (#7133)\n * Issue 7121 - LeakSanitizer: various leaks during replication (#7122)\n * Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116)\n * Issue 7109 - AddressSanitizer: SEGV ldap/servers/slapd/csnset.c:302 in csnset_dup (#7114)\n * Issue 7056 - DSBLE0007 doesn\u0027t generate remediation steps for missing indexes\n * Issue 7119 - Harden DNA plugin locking for shared server list operations (#7120)\n * Issue 7084 - UI - schema - sorting attributes breaks expanded row\n * Issue 7007 - Improve paged result search locking\n * Issue 3555 - UI - Fix audit issue with npm - glob (#7107)\n * Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026)\n * Issue 6901 - Update changelog trimming logging - fix tests\n * Issue 6901 - Update changelog trimming logging\n * Bump js-yaml from 4.1.0 to 4.1.1 in /src/cockpit/389-console (#7097)\n * Issue 7069 - Fix error reporting in HAProxy trusted IP parsing (#7094)\n * Issue 7055 - Online initialization of consumers fails with error -23 (#7075)\n * Issue 7042 - Enable global_backend_lock when memberofallbackend is enabled (#7043)\n * Issue 7078 - audit json logging does not encode binary values\n * Issue 7069 - Add Subnet/CIDR Support for HAProxy Trusted IPs (#7070)\n * Issue 6660 - CLI, UI - Improve replication log analyzer usability (#7062)\n * Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries (#7068)\n * Issue 7071 - search filter (\u0026(cn:dn:=groups)) no longer returns results\n * Issue 7073 - Add NDN cache size configuration and enforcement tests (#7074)\n * Issue 7041 - CLI/UI - memberOf - no way to add/remove specific group filters\n * Issue 7061 - CLI/UI - Improve error messages for dsconf localpwp list\n * Issue 7059 - UI - unable to upload pem file\n * Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue (#7036)\n * Issue 7047 - MemberOf plugin logs null attribute name on fixup task completion (#7048)\n * Issue 7044 - RFE - index sudoHost by default (#7046)\n * Issue 6979 - Improve the way to detect asynchronous operations in the access logs (#6980)\n * Issue 7035 - RFE - memberOf - adding scoping for specific groups\n * Issue - CLI/UI - Add option to delete all replication conflict entries\n * Issue 7033 - lib389 - basic plugin status not in JSON\n * Issue 7023 - UI - if first instance that is loaded is stopped it breaks parts of the UI\n * Issue 7027 - 389-ds-base OpenScanHub Leaks Detected (#7028)\n * Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967)\n * Issue 6660 - UI - Improve replication log analysis charts and usability (#6968)\n * Issue 6982 - UI - MemberOf shared config does not validate DN properly (#6983)\n * Issue 7021 - Units for changing MDB max size are not consistent across different tools (#7022)\n * Issue 6954 - do not delete referrals on chain_on_update backend\n * Issue 7018 - BUG - prevent stack depth being hit (#7019)\n * Issue 6928 - The parentId attribute is indexed with improper matching rule\n * Issue 6933 - When deferred memberof update is enabled after the server crashed it should not launch memberof fixup\n   task by default (#6935)\n * Issue 6904 - Fix config_test.py::test_lmdb_config\n * Issue 7014 - memberOf - ignored deferred updates with LMDB\n * Issue 7012 - improve dscrl dbverify result when backend does not exists (#7013)\n * Issue 6929 - Compilation failure with rust-1.89 on Fedora ELN\n * Issue 6990 - UI - Replace deprecated Select components with new TypeaheadSelect (#6996)\n * Issue 6990 - UI - Fix typeahead Select fields losing values on Enter keypress (#6991)\n * Issue 6887 - Enhance logconv.py to add support for JSON access logs (#6889)\n * Issue 6985 - Some logconv CI tests fail with BDB (#6986)\n * Issue 6891 - JSON logging - add wrapper function that checks for NULL\n * Issue 6977 - UI - Show error message when trying to use unavailable ports (#6978)\n * Issue 6956 - More UI fixes\n * Issue 6947 - Revise time skew check in healthcheck tool and add option to exclude checks\n * Issue 6805 - RFE - Multiple backend entry cache tuning\n * Issue 6843 - Add CI tests for logconv.py (#6856)\n * Issue - UI - update Radio handlers and LDAP entries last modified time\n * Issue 6660 - UI - Fix minor typo (#6955)\n * Issue 6910 - Fix latest coverity issues\n * Issue 6919 - numSubordinates/tombstoneNumSubordinates are inconsisten... (#6920)\n * Issue 6663 - Fix NULL subsystem crash in JSON error logging (#6883)\n * Issue 6940 - dsconf monitor server fails with ldapi:// due to absent server ID (#6941)\n * Issue 6936 - Make user/subtree policy creation idempotent (#6937)\n * Issue 6865 - AddressSanitizer: leak in agmt_update_init_status\n * Issue 6848 - AddressSanitizer: leak in do_search\n * Issue 6850 - AddressSanitizer: memory leak in mdb_init\n * Issue 6778 - Memory leak in roles_cache_create_object_from_entry part 2\n * Issue 6778 - Memory leak in roles_cache_create_object_from_entry\n * Issue 6181 - RFE - Allow system to manage uid/gid at startup\n * Issues 6913, 6886, 6250 - Adjust xfail marks (#6914)\n * Issue 6768 - ns-slapd crashes when a referral is added (#6780)\n * Issue 6468 - CLI - Fix default error log level\n * Issue 6339 - Address Coverity scan issues in memberof and bdb_layer (#6353)\n * Issue 6897 - Fix disk monitoring test failures and improve test maintainability (#6898)\n * Issue 6884 - Mask password hashes in audit logs (#6885)\n * Issue 6594 - Add test for numSubordinates replication consistency with tombstones (#6862)\n * Issue 6250 - Add test for entryUSN overflow on failed add operations (#6821)\n * Issue 6895 - Crash if repl keep alive entry can not be created\n * Issue 6893 - Log user that is updated during password modify extended operation\n * Issue 6772 - dsconf - Replicas with the \"consumer\" role allow for viewing and modification of their\n   changelog. (#6773)\n * Issue 6888 - Missing access JSON logging for TLS/Client auth\n * Issue 6680 - instance read-only mode is broken (#6681)\n * Issue 6878 - Prevent repeated disconnect logs during shutdown (#6879)\n * Issue 6872 - compressed log rotation creates files with world readable permission\n * Issue 6859 - str2filter is not fully applying matching rules\n * Issue 6868 - UI - schema attribute table expansion break after moving to a new page\n * Issue 6854 - Refactor for improved data management (#6855)\n * Issue 6756 - CLI, UI - Properly handle disabled NDN cache (#6757)\n * Issue 6857 - uiduniq: allow specifying match rules in the filter\n * Issue 6838 - lib389/replica.py is using nonexistent datetime.UTC in Python 3.9\n * Issue 6822 - Backend creation cleanup and Database UI tab error handling (#6823)\n * Issue 6782 - Improve paged result locking\n * Issue 6825 - RootDN Access Control Plugin with wildcards for IP addre... (#6826)\n * Issue 6736 - Exception thrown by dsconf instance repl get_ruv (#6742)\n * Issue 6819 - Incorrect pwdpolicysubentry returned for an entry with user password policy\n * Issue 6553 - Update concread to 0.5.6 (#6824)\n * Issue 1081 - Add a CI test (#6063)\n * Issue 6761 - Password modify extended operation should skip password policy checks when executed by root DN\n * Issue 6791 - crash in liblmdb during instance shutdown (#6793)\n * Issue 6641 - modrdn fails when a user is member of multiple groups (#6643)\n * Issue 6776 - Enabling audit log makes slapd coredump\n * Issue 6534 - CI fails with Fedora 41 and DNF5\n * Issue 6787 - Improve error message when bulk import connection is closed\n * Issue 6727 - RFE - database compaction interval should be persistent\n * Issue 6438 - Add basic dsidm organizational unit tests\n * Issue 6439 - Fix dsidm service get_dn option\n * Issue 5120 - ns-slapd doesn\u0027t start in referral mode (#6763)\n",
        "title": "Description of the patch"
      },
      {
        "category": "details",
        "text": "openSUSE-Leap-16.0-434",
        "title": "Patchnames"
      },
      {
        "category": "legal_disclaimer",
        "text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
        "title": "Terms of use"
      }
    ],
    "publisher": {
      "category": "vendor",
      "contact_details": "https://www.suse.com/support/security/contact/",
      "name": "SUSE Product Security Team",
      "namespace": "https://www.suse.com/"
    },
    "references": [
      {
        "category": "external",
        "summary": "SUSE ratings",
        "url": "https://www.suse.com/support/security/rating/"
      },
      {
        "category": "self",
        "summary": "URL of this CSAF notice",
        "url": "https://ftp.suse.com/pub/projects/security/csaf/opensuse-su-2026_20415-1.json"
      },
      {
        "category": "self",
        "summary": "SUSE Bug 1258727",
        "url": "https://bugzilla.suse.com/1258727"
      },
      {
        "category": "self",
        "summary": "SUSE CVE CVE-2025-14905 page",
        "url": "https://www.suse.com/security/cve/CVE-2025-14905/"
      }
    ],
    "title": "Security update for 389-ds",
    "tracking": {
      "current_release_date": "2026-03-24T17:50:31Z",
      "generator": {
        "date": "2026-03-24T17:50:31Z",
        "engine": {
          "name": "cve-database.git:bin/generate-csaf.pl",
          "version": "1"
        }
      },
      "id": "openSUSE-SU-2026:20415-1",
      "initial_release_date": "2026-03-24T17:50:31Z",
      "revision_history": [
        {
          "date": "2026-03-24T17:50:31Z",
          "number": "1",
          "summary": "Current version"
        }
      ],
      "status": "final",
      "version": "1"
    }
  },
  "product_tree": {
    "branches": [
      {
        "branches": [
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                "product": {
                  "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                  "product_id": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                "product": {
                  "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                  "product_id": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                "product": {
                  "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                  "product_id": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                "product": {
                  "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                  "product_id": "lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
                }
              },
              {
                "category": "product_version",
                "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                "product": {
                  "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
                  "product_id": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
                }
              }
            ],
            "category": "architecture",
            "name": "aarch64"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                "product": {
                  "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                  "product_id": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                "product": {
                  "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                  "product_id": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                "product": {
                  "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                  "product_id": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                "product": {
                  "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                  "product_id": "lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
                }
              },
              {
                "category": "product_version",
                "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                "product": {
                  "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
                  "product_id": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
                }
              }
            ],
            "category": "architecture",
            "name": "ppc64le"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                "product": {
                  "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                  "product_id": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                "product": {
                  "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                  "product_id": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                "product": {
                  "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                  "product_id": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                "product": {
                  "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                  "product_id": "lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x"
                }
              },
              {
                "category": "product_version",
                "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                "product": {
                  "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
                  "product_id": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x"
                }
              }
            ],
            "category": "architecture",
            "name": "s390x"
          },
          {
            "branches": [
              {
                "category": "product_version",
                "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                "product": {
                  "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                  "product_id": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                "product": {
                  "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                  "product_id": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                "product": {
                  "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                  "product_id": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                "product": {
                  "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                  "product_id": "lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
                }
              },
              {
                "category": "product_version",
                "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                "product": {
                  "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
                  "product_id": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
                }
              }
            ],
            "category": "architecture",
            "name": "x86_64"
          },
          {
            "branches": [
              {
                "category": "product_name",
                "name": "openSUSE Leap 16.0",
                "product": {
                  "name": "openSUSE Leap 16.0",
                  "product_id": "openSUSE Leap 16.0"
                }
              }
            ],
            "category": "product_family",
            "name": "SUSE Linux Enterprise"
          }
        ],
        "category": "vendor",
        "name": "SUSE"
      }
    ],
    "relationships": [
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
        },
        "product_reference": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
        },
        "product_reference": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x"
        },
        "product_reference": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        },
        "product_reference": "389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
        },
        "product_reference": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
        },
        "product_reference": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x"
        },
        "product_reference": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        },
        "product_reference": "389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
        },
        "product_reference": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
        },
        "product_reference": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x"
        },
        "product_reference": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        },
        "product_reference": "389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
        },
        "product_reference": "lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
        },
        "product_reference": "lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x"
        },
        "product_reference": "lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        },
        "product_reference": "lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64"
        },
        "product_reference": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le"
        },
        "product_reference": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x"
        },
        "product_reference": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      },
      {
        "category": "default_component_of",
        "full_product_name": {
          "name": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64 as component of openSUSE Leap 16.0",
          "product_id": "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        },
        "product_reference": "libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
        "relates_to_product_reference": "openSUSE Leap 16.0"
      }
    ]
  },
  "vulnerabilities": [
    {
      "cve": "CVE-2025-14905",
      "ids": [
        {
          "system_name": "SUSE CVE Page",
          "text": "https://www.suse.com/security/cve/CVE-2025-14905"
        }
      ],
      "notes": [
        {
          "category": "general",
          "text": "A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).",
          "title": "CVE description"
        }
      ],
      "product_status": {
        "recommended": [
          "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
          "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
          "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
          "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
          "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
          "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
          "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
          "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
          "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
        ]
      },
      "references": [
        {
          "category": "external",
          "summary": "CVE-2025-14905",
          "url": "https://www.suse.com/security/cve/CVE-2025-14905"
        },
        {
          "category": "external",
          "summary": "SUSE Bug 1258727 for CVE-2025-14905",
          "url": "https://bugzilla.suse.com/1258727"
        }
      ],
      "remediations": [
        {
          "category": "vendor_fix",
          "details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
          "product_ids": [
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
          ]
        }
      ],
      "scores": [
        {
          "cvss_v3": {
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "products": [
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-devel-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:389-ds-snmp-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:lib389-3.0.6~git249.6688af9b2-160000.1.1.x86_64",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.aarch64",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.ppc64le",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.s390x",
            "openSUSE Leap 16.0:libsvrcore0-3.0.6~git249.6688af9b2-160000.1.1.x86_64"
          ]
        }
      ],
      "threats": [
        {
          "category": "impact",
          "date": "2026-03-24T17:50:31Z",
          "details": "important"
        }
      ],
      "title": "CVE-2025-14905"
    }
  ]
}

CVE-2025-14905 (GCVE-0-2025-14905)

Vulnerability from cvelistv5 – Published: 2026-02-23 15:41 – Updated: 2026-06-29 23:32

Title

389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow

Summary

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).

Severity

7.2 (High)


                        
                          CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SSVC

Exploitation: none Automatable: no Technical Impact: total

CISA Coordinator · CISA-ADP (v2.0.3)

Decision recorded 2026-02-23 18:49 UTC

CWE

CWE-122 - Heap-based Buffer Overflow

Assigner

redhat redhat root

References

21 references

URL	Tags
https://access.redhat.com/errata/RHSA-2026:3189	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3208	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3379	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:3504	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4207	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4661	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:4720	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5196	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5511	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5512	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5513	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5514	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5568	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5569	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5576	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5597	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:5598	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6220	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/errata/RHSA-2026:6268	vendor-advisoryx_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-14905	vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2423624	issue-trackingx_refsource_REDHAT

Impacted products

26 products

Vendor	Product	Version
Red Hat	Red Hat Directory Server 11.5 E4S for RHEL 8	Unaffected: 8060020260303152239.0ca98e7e , < * (rpm) cpe:/a:redhat:directory_server_e4s:11.5::el8
Red Hat	Red Hat Directory Server 11.7 E4S for RHEL 8	Unaffected: 8080020260227193008.f969626e , < * (rpm) cpe:/a:redhat:directory_server_e4s:11.7::el8
Red Hat	Red Hat Directory Server 11.9 for RHEL 8	Unaffected: 8100020260312105752.37ed7c03 , < * (rpm) cpe:/a:redhat:directory_server:11.9::el8
Red Hat	Red Hat Directory Server 12.2 E4S for RHEL 9	Unaffected: 9020020260304180546.1674d574 , < * (rpm) cpe:/a:redhat:directory_server_e4s:12.2::el9
Red Hat	Red Hat Directory Server 12.4 EUS for RHEL 9	Unaffected: 9040020260225135630.1674d574 , < * (rpm) cpe:/a:redhat:directory_server_eus:12.4::el9
Red Hat	Red Hat Enterprise Linux 10	Unaffected: 0:3.1.3-7.el10_1 , < * (rpm) cpe:/o:redhat:enterprise_linux:10.1
Red Hat	Red Hat Enterprise Linux 10.0 Extended Update Support	Unaffected: 0:3.0.6-17.el10_0 , < * (rpm) cpe:/o:redhat:enterprise_linux_eus:10.0
Red Hat	Red Hat Enterprise Linux 7 Extended Lifecycle Support	Unaffected: 0:1.3.11.1-11.el7_9 , < * (rpm) cpe:/o:redhat:rhel_els:7
Red Hat	Red Hat Enterprise Linux 8	Unaffected: 8100020260312103235.25e700aa , < * (rpm) cpe:/a:redhat:enterprise_linux:8::appstream
Red Hat	Red Hat Enterprise Linux 8.2 Advanced Update Support	Unaffected: 8020020260303204738.dbc46ba7 , < * (rpm) cpe:/a:redhat:rhel_aus:8.2::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support	Unaffected: 8040020260303172348.96015a92 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On	Unaffected: 8040020260303172348.96015a92 , < * (rpm) cpe:/a:redhat:rhel_aus:8.4::appstream cpe:/a:redhat:rhel_eus_long_life:8.4::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support	Unaffected: 8060020260303144613.824efc52 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Telecommunications Update Service	Unaffected: 8060020260303144613.824efc52 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions	Unaffected: 8060020260303144613.824efc52 , < * (rpm) cpe:/a:redhat:rhel_aus:8.6::appstream cpe:/a:redhat:rhel_e4s:8.6::appstream cpe:/a:redhat:rhel_tus:8.6::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Telecommunications Update Service	Unaffected: 8080020260227183930.6dbb3803 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions	Unaffected: 8080020260227183930.6dbb3803 , < * (rpm) cpe:/a:redhat:rhel_e4s:8.8::appstream cpe:/a:redhat:rhel_tus:8.8::appstream
Red Hat	Red Hat Enterprise Linux 9	Unaffected: 0:2.7.0-10.el9_7 , < * (rpm) cpe:/a:redhat:enterprise_linux:9::appstream cpe:/a:redhat:enterprise_linux:9::crb
Red Hat	Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions	Unaffected: 0:2.0.14-5.el9_0 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.0::appstream
Red Hat	Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions	Unaffected: 0:2.2.4-17.el9_2 , < * (rpm) cpe:/a:redhat:rhel_e4s:9.2::appstream
Red Hat	Red Hat Enterprise Linux 9.4 Extended Update Support	Unaffected: 0:2.4.5-24.el9_4 , < * (rpm) cpe:/a:redhat:rhel_eus:9.4::appstream cpe:/a:redhat:rhel_eus:9.4::crb
Red Hat	Red Hat Enterprise Linux 9.6 Extended Update Support	Unaffected: 0:2.6.1-20.el9_6 , < * (rpm) cpe:/a:redhat:rhel_eus:9.6::appstream cpe:/a:redhat:rhel_eus:9.6::crb
Red Hat	Red Hat Directory Server 13.1	Unaffected: 1772040913 , < * (rpm) cpe:/a:redhat:directory_server:13.1::el10
Red Hat	Red Hat Directory Server 12	cpe:/a:redhat:directory_server:12
Red Hat	Red Hat Directory Server 13	cpe:/a:redhat:directory_server:13
Red Hat	Red Hat Enterprise Linux 6	cpe:/o:redhat:enterprise_linux:6

Date Public

2026-02-23 00:00

Credits

This issue was discovered by Red Hat Security Research Team (Red Hat Inc.).

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2025-14905",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-02-23T18:49:43.028074Z",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-02-23T18:54:27.128Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server_e4s:11.5::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:11",
          "product": "Red Hat Directory Server 11.5 E4S for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8060020260303152239.0ca98e7e",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server_e4s:11.7::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:11",
          "product": "Red Hat Directory Server 11.7 E4S for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8080020260227193008.f969626e",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server:11.9::el8"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:11",
          "product": "Red Hat Directory Server 11.9 for RHEL 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8100020260312105752.37ed7c03",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server_e4s:12.2::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:12",
          "product": "Red Hat Directory Server 12.2 E4S for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "9020020260304180546.1674d574",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server_eus:12.4::el9"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:12",
          "product": "Red Hat Directory Server 12.4 EUS for RHEL 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "9040020260225135630.1674d574",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:10.1"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 10",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.1.3-7.el10_1",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux_eus:10.0"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:3.0.6-17.el10_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:rhel_els:7"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:1.3.11.1-11.el7_9",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8100020260312103235.25e700aa",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.2 Advanced Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8020020260303204738.dbc46ba7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8040020260303172348.96015a92",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.4::appstream",
            "cpe:/a:redhat:rhel_eus_long_life:8.4::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.4 Extended Update Support Long-Life Add-On",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8040020260303172348.96015a92",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8060020260303144613.824efc52",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8060020260303144613.824efc52",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_aus:8.6::appstream",
            "cpe:/a:redhat:rhel_e4s:8.6::appstream",
            "cpe:/a:redhat:rhel_tus:8.6::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8060020260303144613.824efc52",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8080020260227183930.6dbb3803",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:8.8::appstream",
            "cpe:/a:redhat:rhel_tus:8.8::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds:1.4",
          "product": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "8080020260227183930.6dbb3803",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:enterprise_linux:9::appstream",
            "cpe:/a:redhat:enterprise_linux:9::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 9",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.7.0-10.el9_7",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.0::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.0.14-5.el9_0",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_e4s:9.2::appstream"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.2.4-17.el9_2",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.4::appstream",
            "cpe:/a:redhat:rhel_eus:9.4::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 9.4 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.4.5-24.el9_4",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:rhel_eus:9.6::appstream",
            "cpe:/a:redhat:rhel_eus:9.6::crb"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "0:2.6.1-20.el9_6",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://catalog.redhat.com/software/containers/",
          "cpes": [
            "cpe:/a:redhat:directory_server:13.1::el10"
          ],
          "defaultStatus": "affected",
          "packageName": "dirsrv/dirsrv-container-rhel10",
          "product": "Red Hat Directory Server 13.1",
          "vendor": "Red Hat",
          "versions": [
            {
              "lessThan": "*",
              "status": "unaffected",
              "version": "1772040913",
              "versionType": "rpm"
            }
          ]
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server:12"
          ],
          "defaultStatus": "affected",
          "packageName": "redhat-ds:12/389-ds-base",
          "product": "Red Hat Directory Server 12",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/a:redhat:directory_server:13"
          ],
          "defaultStatus": "affected",
          "packageName": "389-ds-base",
          "product": "Red Hat Directory Server 13",
          "vendor": "Red Hat"
        },
        {
          "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
          "cpes": [
            "cpe:/o:redhat:enterprise_linux:6"
          ],
          "defaultStatus": "unknown",
          "packageName": "389-ds-base",
          "product": "Red Hat Enterprise Linux 6",
          "vendor": "Red Hat"
        }
      ],
      "credits": [
        {
          "lang": "en",
          "value": "This issue was discovered by Red Hat Security Research Team (Red Hat Inc.)."
        }
      ],
      "datePublic": "2026-02-23T00:00:00.000Z",
      "descriptions": [
        {
          "lang": "en",
          "value": "A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE)."
        }
      ],
      "metrics": [
        {
          "other": {
            "content": {
              "namespace": "https://access.redhat.com/security/updates/classification/",
              "value": "Moderate"
            },
            "type": "Red Hat severity rating"
          }
        },
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 7.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "HIGH",
            "scope": "UNCHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-122",
              "description": "Heap-based Buffer Overflow",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-06-29T23:32:28.864Z",
        "orgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
        "shortName": "redhat"
      },
      "references": [
        {
          "name": "RHSA-2026:3189",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3189"
        },
        {
          "name": "RHSA-2026:3208",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3208"
        },
        {
          "name": "RHSA-2026:3379",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3379"
        },
        {
          "name": "RHSA-2026:3504",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:3504"
        },
        {
          "name": "RHSA-2026:4207",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4207"
        },
        {
          "name": "RHSA-2026:4661",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4661"
        },
        {
          "name": "RHSA-2026:4720",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:4720"
        },
        {
          "name": "RHSA-2026:5196",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5196"
        },
        {
          "name": "RHSA-2026:5511",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5511"
        },
        {
          "name": "RHSA-2026:5512",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5512"
        },
        {
          "name": "RHSA-2026:5513",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5513"
        },
        {
          "name": "RHSA-2026:5514",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5514"
        },
        {
          "name": "RHSA-2026:5568",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5568"
        },
        {
          "name": "RHSA-2026:5569",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5569"
        },
        {
          "name": "RHSA-2026:5576",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5576"
        },
        {
          "name": "RHSA-2026:5597",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5597"
        },
        {
          "name": "RHSA-2026:5598",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:5598"
        },
        {
          "name": "RHSA-2026:6220",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6220"
        },
        {
          "name": "RHSA-2026:6268",
          "tags": [
            "vendor-advisory",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/errata/RHSA-2026:6268"
        },
        {
          "tags": [
            "vdb-entry",
            "x_refsource_REDHAT"
          ],
          "url": "https://access.redhat.com/security/cve/CVE-2025-14905"
        },
        {
          "name": "RHBZ#2423624",
          "tags": [
            "issue-tracking",
            "x_refsource_REDHAT"
          ],
          "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2423624"
        }
      ],
      "timeline": [
        {
          "lang": "en",
          "time": "2025-12-18T18:04:56.621Z",
          "value": "Reported to Red Hat."
        },
        {
          "lang": "en",
          "time": "2026-02-23T00:00:00.000Z",
          "value": "Made public."
        }
      ],
      "title": "389-ds-base: 389-ds-base: remote code execution and denial of service via heap buffer overflow",
      "workarounds": [
        {
          "lang": "en",
          "value": "Restrict network access to the 389-ds-base server to only trusted hosts and networks using firewall rules. Additionally, ensure that administrative access to the server is strictly limited to authorized personnel with strong authentication, as exploitation requires high privileges. This reduces the attack surface and the likelihood of an attacker gaining the necessary privileges to trigger the heap overflow."
        }
      ],
      "x_generator": {
        "engine": "cvelib 1.8.0"
      },
      "x_redhatCweChain": "CWE-122: Heap-based Buffer Overflow"
    }
  },
  "cveMetadata": {
    "assignerOrgId": "53f830b8-0a3f-465b-8143-3b8a9948e749",
    "assignerShortName": "redhat",
    "cveId": "CVE-2025-14905",
    "datePublished": "2026-02-23T15:41:47.976Z",
    "dateReserved": "2025-12-18T18:06:35.400Z",
    "dateUpdated": "2026-06-29T23:32:28.864Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Sightings

Author	Source	Type	Date	Other

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base model, served locally by ML-Gateway. They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Browse all ATT&CK techniques and the vulnerabilities related to each.

Related by attack behaviour

Vulnerabilities whose description is nearest to this one in the vector space of the CIRCL/vulnerability-attack-technique-biencoder model. This is a similarity search over the bi-encoder space (plain cosine), not a classification, and it has no measured accuracy.