Log in Start free

Vulnerability · Published Mar 18, 2025 · Assigned by redhat

CVE-2025-2487389-ds-base: null pointer dereference leads to denial of service

Medium 4.9

In plain English

A medium-severity null pointer dereference in 389-ds-base. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 49% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.

Severity (CVSS 3.1)4.9Medium
Exploit odds (30 days)0.6%top 51.2% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.

Affected packages & fixed versions

EcosystemPackageFixed inAdvisory
AlmaLinux:9389-ds-base2.6.1-8.el9_6ALSA-2025:7395
AlmaLinux:9389-ds-base2.5.2-9.el9_5ALSA-2025:4491
AlmaLinux:9389-ds-base-devel2.5.2-9.el9_5ALSA-2025:4491
AlmaLinux:9389-ds-base-devel2.6.1-8.el9_6ALSA-2025:7395
AlmaLinux:9389-ds-base-libs2.6.1-8.el9_6ALSA-2025:7395
AlmaLinux:9389-ds-base-libs2.5.2-9.el9_5ALSA-2025:4491
AlmaLinux:9389-ds-base-snmp2.5.2-9.el9_5ALSA-2025:4491
AlmaLinux:9389-ds-base-snmp2.6.1-8.el9_6ALSA-2025:7395
AlmaLinux:9python3-lib3892.6.1-8.el9_6ALSA-2025:7395
AlmaLinux:9python3-lib3892.5.2-9.el9_5ALSA-2025:4491
Debian:12389-ds-baseno fix listedDEBIAN-CVE-2025-2487
Debian:13389-ds-base3.1.2+dfsg1-1DEBIAN-CVE-2025-2487
Rocky Linux:9389-ds-base0:2.5.2-9.el9_5RLSA-2025:4491
Rocky Linux:9389-ds-base0:2.6.1-8.el9_6RLSA-2025:7395
Ubuntu:22.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2025-2487
Ubuntu:24.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2025-2487
Ubuntu:25.10389-ds-baseno fix listedUBUNTU-CVE-2025-2487
Ubuntu:26.04:LTS389-ds-baseno fix listedUBUNTU-CVE-2025-2487
Ubuntu:26.10389-ds-baseno fix listedUBUNTU-CVE-2025-2487

Affected products (as reported)

VendorProductVersions
389-ds-base 2.4.0 – through 2.4.62.5.0 – through 2.5.32.6.0 – through 2.6.13.0.0 – through 3.0.6
Red Hat Red Hat Directory Server 12.4 EUS for RHEL 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9 see references
Red Hat Red Hat Enterprise Linux 9.4 Extended Update Support see references
Red Hat Red Hat Directory Server 12 see references
Red Hat Red Hat Enterprise Linux 10 see references
Red Hat Red Hat Enterprise Linux 6 see references
Red Hat Red Hat Enterprise Linux 7 see references
Red Hat Red Hat Enterprise Linux 8 see references

Weakness: CWE-476 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H

References