CVE-2025-14905 Red Hat CVE debrief

Who should care

Organizations using the 389-ds-base server should prioritize patching this vulnerability to prevent potential exploitation. The vulnerability's high CVSS score and potential for remote code execution make it a critical concern for administrators responsible for maintaining servers with this software. Additionally, security teams should review their inventory of affected systems and ensure that appropriate mitigations are in place.

Technical summary

The CVE-2025-14905 vulnerability is caused by a heap buffer overflow in the `schema_attr_enum_callback` function of the 389-ds-base server. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow. The vulnerability has a CVSS score of 7.2 and can potentially allow remote attackers to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE). The vulnerability is considered high severity and requires immediate attention from administrators and security teams.

Defensive priority

High priority should be given to patching this vulnerability due to its high CVSS score and potential for remote code execution. Administrators should review their inventory of affected systems and ensure that appropriate mitigations are in place.

Recommended defensive actions

• Apply patches or updates provided by the vendor to address the vulnerability.
• Review and update inventory of affected systems to ensure accurate tracking.
• Implement compensating controls, such as monitoring and intrusion detection, to detect potential exploitation attempts.
• Consider temporarily disabling affected services or implementing additional security measures if patching is not immediately feasible.
• Monitor for and respond to potential exploitation attempts using security information and event management (SIEM) systems.

Evidence notes

The CVE-2025-14905 vulnerability was published on February 23, 2026, and last modified on June 25, 2026. The vulnerability has a CVSS score of 7.2 and is considered high severity. The National Vulnerability Database (NVD) provides detailed information about the vulnerability, including its description, CVSS vector, and references.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.