Remote Code Execution Vulnerability in 389-ds-base Package
Summary
ALSA-2026:5513: Moderate: 389-ds:1.4 security update. Affects 389-ds-base versions < 1.4.3.39-23.module_el8.10.0+4139+ef6adba4. Fixed in 1.4.3.39-23.module_el8.10.0+4139+ef6adba4. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
389 Directory Server is an LDAP version 3 compliant server that provides a robust platform for directory services. It includes essential tools for server administration and is widely used in enterprise environments for managing user data and access control. However, a recent vulnerability has been identified that could compromise the security of systems utilizing this package.
Vulnerability Detail
The vulnerability, identified as CVE-2025-14905, is a remote code execution and denial of service issue caused by a heap buffer overflow in the 389-ds-base package. This flaw allows an attacker to execute arbitrary code on the server or disrupt its normal operations, potentially leading to unauthorized access to sensitive data or service outages. The issue arises from improper handling of memory allocation, making it critical for users to address it promptly.
How To Fix
Minimum fixed version
1.4.3.39-23.module_el8.10.0+4139+ef6adba4
This is the first release that contains the fix.
sudo dnf update 389-ds-baseTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary measure, users can restrict access to the 389 Directory Server by implementing firewall rules to limit connections to trusted IP addresses only. This will help mitigate the risk of exploitation until the packages can be updated.
Conclusion
The vulnerability in the 389-ds-base package poses significant risks to systems utilizing this directory server. It is crucial for users to update their packages to the latest patched versions to mitigate these risks. Implementing temporary workarounds can also help protect systems until updates are applied.
See every vulnerability recorded for 389-ds-base →
FAQ
CVE-2025-14905 is a vulnerability in the 389-ds-base package that allows for remote code execution and denial of service due to a heap buffer overflow.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
The vulnerability can lead to unauthorized access to sensitive data, service disruptions, and potential complete system compromise.
Yes, a patch is available in version 1.4.3.39-23.module_el8.10.0+4139+ef6adba4 and users are advised to update their packages.
If immediate updating is not possible, implement firewall rules to restrict access to the 389 Directory Server to trusted IP addresses as a temporary workaround.
Related vulnerabilities
Recent vulnerabilities recorded for 389-ds-base.
