CVE-2025-14905
A flaw was found in the 389-ds-base server.
Published Feb 23, 2026 · updated Jun 30, 2026
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the function within the file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).
Code
The project this record applies to. Exploit listings stay in References.
No public source repository is identified for this product.
Timeline
Detection, updates, and resolution for this record.
Feb 23, 2026 · NIST NVD
Detected
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the function within the file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote at
Jun 30, 2026 · NIST NVD
Updated
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the function within the file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote at
Sources
- NIST NVDVulnerability recordCVE-2025-14905
A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the function within the file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting f
nvd.nist.gov