What is the CVSS score of CVE-2025-14905?

CVE-2025-14905 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H. EPSS exploitation probability: 0.4%.

How to fix or mitigate CVE-2025-14905?

Within 24 hours: Inventory all 389-ds-base deployments and assess exposure; implement network segmentation to restrict access to affected servers. Within 7 days: Deploy compensating controls including WAF rules to block malformed schema requests, disable schema enumeration features if operationally feasible, and increase monitoring for exploit attempts. Within 30 days: Establish regular contact with vendor for patch availability; evaluate alternative directory service solutions; conduct full security review of directory service configurations.

CVE-2025-14905

HIGH

Heap-based Buffer Overflow (CWE-122)

2026-02-23 secalert@redhat.com

RCE Buffer Overflow Heap Overflow Denial Of Service

7.2

CVSS 3.1 · Vendor: redhat

Severity by source

Vendor (redhat) PRIMARY

7.2 HIGH

AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

SUSE

HIGH

qualitative

Red Hat

7.2 MEDIUM

qualitative

Primary rating from Vendor (redhat).

CVSS VectorVendor: redhat

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Patch released

Mar 31, 2026 - 21:13 nvd

Patch available

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

CVE Published

Feb 23, 2026 - 16:29 nvd

HIGH 7.2

DescriptionCVE.org

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schema_attr_enum_callback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).

AnalysisAI

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schema_attr_enum_callback function within the schema.c file. [CVSS 7.2 HIGH]

Technical ContextAI

Classified as CWE-122 (Heap-based Buffer Overflow). A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schema_attr_enum_callback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote C

Affected ProductsAI

the 389-ds-base server

RemediationAI

Monitor vendor advisories for a patch. Enable ASLR, DEP/NX, and stack canaries where possible. Restrict network access to the affected service where possible.

Same weakness CWE-122 – Heap-based Buffer Overflow

View all

CVE-2023-4911 HIGH POC

7.8

CVE-2025-24985 HIGH POC

7.8

CVE-2025-21418 HIGH

7.8

CVE-2025-24993 HIGH

7.8

CVE-2023-6246 HIGH POC

8.4

CVE-2026-42945 CRITICAL POC

9.2

CVE-2014-0781 CRITICAL POC

9.3

CVE-2024-30085 HIGH POC

7.8

Same technique RCE

View all

CVE-2017-7269 CRITICAL POC

9.8

CVE-2012-4681 CRITICAL POC

9.8

CVE-2015-5119 CRITICAL POC

9.8

CVE-2016-4117 CRITICAL POC

9.8

CVE-2015-3113 CRITICAL POC

9.8

CVE-2011-2462 CRITICAL POC

9.8

CVE-2025-53770 CRITICAL POC

9.8

CVE-2020-7961 CRITICAL POC

9.8

Vendor StatusVendor

SUSE

Severity: High

Product	Status
Container suse/sl-micro/6.0/toolbox:13.2-9.29	Affected
Container suse/sl-micro/6.1/baremetal-os-container:2.2.1-7.67 Image SL-Micro-EC2 Image SUSE-Multi-Linux-Manager-Server-EC2-llc Image SUSE-Multi-Linux-Manager-Server-EC2-ltd	Affected
SUSE Liberty Linux 8	Fixed
SUSE Liberty Linux 9	Fixed
SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS	Fixed

CVE-2025-14905 vulnerability details – vuln.today

Back

CVE-2025-14905

Severity by source

CVSS VectorVendor: redhat

Lifecycle Timeline

DescriptionCVE.org

AnalysisAI

Technical ContextAI

Affected ProductsAI

RemediationAI

Same weakness CWE-122 – Heap-based Buffer Overflow

Same technique RCE

Vendor StatusVendor

SUSE

Share

External POC / Exploit Code