The version of Tencent Linux installed on the remote TencentOS Server 3 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0243 advisory.

    Package updates are available for TencentOS Server 3 that fix the following vulnerabilities:

    CVE-2025-14905:
    A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the     schema_attr_enum_callback function within the schema.c file. This occurs because the code incorrectly     calculates the buffer size by summing alias string lengths without accounting for additional formatting     characters. When a large number of aliases are processed, this oversight can lead to a heap overflow,     potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution     (RCE).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 2 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2026:0592 advisory.

    Package updates are available for TencentOS Server 2 that fix the following vulnerabilities:

    CVE-2025-14905:
    A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the     schema_attr_enum_callback function within the schema.c file. This occurs because the code incorrectly     calculates the buffer size by summing alias string lengths without accounting for additional formatting     characters. When a large number of aliases are processed, this oversight can lead to a heap overflow,     potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution     (RCE).

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:3208 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow     (CVE-2025-14905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote RockyLinux 9 host has packages installed that are affected by a vulnerability as referenced in the RLSA-2026:3189 advisory.

    * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow     (CVE-2025-14905)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:4720 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow     (CVE-2025-14905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:0913-1 advisory.

    - CVE-2025-14905: Fixed heap buffer overflow due to improper size calculation in     `schema_attr_enum_callback` callback (bsc#1258727).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:5568 advisory.

    Red Hat Directory Server is an LDAPv3-compliant directory server. The suite of packages includes the     Lightweight Directory Access Protocol (LDAP) server, as well as command-line utilities and Web UI packages     for server administration.

    Security Fix(es):

    * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow     (CVE-2025-14905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:6220 advisory.

    389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the     Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.

    Security Fix(es):

    * 389-ds-base: 389-ds-base: Remote Code Execution and Denial of Service via heap buffer overflow     (CVE-2025-14905)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2026:0072 advisory.

    Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities:

    CVE-2025-14905:
    A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the     `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly     calculates the buffer size by summing alias string lengths without accounting for additional formatting     characters. When a large number of aliases are processed, this oversight can lead to a heap overflow,     potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution     (RCE).

Tenable has extracted the preceding description block directly from the Alibaba Cloud Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2026:1753-1 advisory.

    Update to version 2.0.20~git89.937b1f291.

    Security issues fixed:

    - CVE-2025-14905: heap buffer overflow due to improper size calculation in `schema_attr_enum_callback`     callback       (bsc#1258727).

    Other updates and bugfixes:

    - Issue 7224 - CI Test - Simplify `test_reserve_descriptor_validation` (#7225).
    - Issue 7189 - DSBLE0007 generates incorrect remediation commands for scan limits.
    - Issue 7172 - (2nd) Index ordering mismatch after upgrade (#7180).
    - Issue 7172 - Index ordering mismatch after upgrade (#7173).
    - Issue 7096 - During replication online total init the function idl_id_is_in_idlist is not scaling with     large database       (#7145).
    - Issue 7091 - Duplicate local password policy entries listed (#7092).
    - Issue 7124 - BDB cursor race condition with transaction isolation (#7125).
    - Issue 7121 - LeakSanitizer: various leaks during replication (#7122).
    - Issue 7115 - LeakSanitizer: leak in `slapd_bind_local_user()` (#7116).
    - Issue 7109 - AddressSanitizer: SEGV `ldap/servers/slapd/csnset.c:302` in `csnset_dup` (#7114).
    - Issue 7056 - DSBLE0007 doesn't generate remediation steps for missing indexes.
    - Issue 6846 - Attribute uniqueness is not enforced with modrdn (#7026).
    - Issue 7055 - Online initialization of consumers fails with error `-23` (#7075).
    - Issue 7065 - A search filter containing a non normalized DN assertion does not return matching entries     (#7068).
    - Issue 7032 - The new ipahealthcheck test ipahealthcheck.ds.backends.BackendsCheck raises CRITICAL issue     (#7036).
    - Issue 6966 - On large DB, unlimited IDL scan limit reduce the SRCH performance (#6967).
    - Issue 6848 - AddressSanitizer: leak in `do_search`.
    - Issue 6928 - The `parentId` attribute is indexed with improper matching rule.
    - Issue 6933 - When deferred `memberof` update is enabled after the server crashed it should not launch     memberof fixup       task by default (#6935).
    - Issue 6929 - Compilation failure with `rust-1.89` on Fedora ELN.
    - Issue 6859 - `str2filter` is not fully applying matching rules.
    - Issue 6857 - `uiduniq`: allow specifying match rules in the filter.
    - Issue 6893 - Log user that is updated during password modify extended operation.
    - Issue 6680 - instance read-only mode is broken (#6681).

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the     `schema_attr_enum_callback` function within the `schema.c` file. This occurs because the code incorrectly     calculates the buffer size by summing alias string lengths without accounting for additional formatting     characters. When a large number of aliases are processed, this oversight can lead to a heap overflow,     potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution     (RCE). (CVE-2025-14905)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
310050	TencentOS Server 3: 389-ds:1.4 (TSSA-2026:0243)	Nessus	Tencent Local Security Checks	2026/4/24	2026/4/24	high
324638	TencentOS Server 2: 389-ds-base (TSSA-2026:0592)	Nessus	Tencent Local Security Checks	2026/7/2	2026/7/2	high
300081	RHEL 10 : 389-ds-base (RHSA-2026:3208)	Nessus	Red Hat Local Security Checks	2026/2/27	2026/2/27	high
300468	RockyLinux 9 : 389-ds-base (RLSA-2026:3189)	Nessus	Rocky Linux Local Security Checks	2026/3/3	2026/3/3	high
302768	RHEL 9 : 389-ds-base (RHSA-2026:4720)	Nessus	Red Hat Local Security Checks	2026/3/17	2026/3/17	high
303018	SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:0913-1)	Nessus	SuSE Local Security Checks	2026/3/19	2026/3/19	high
303424	RHEL 8 : redhat-ds:11 (RHSA-2026:5568)	Nessus	Red Hat Local Security Checks	2026/3/24	2026/3/24	high
304376	RHEL 7 : 389-ds-base (RHSA-2026:6220)	Nessus	Red Hat Local Security Checks	2026/3/31	2026/3/31	high
307687	Alibaba Cloud Linux 3 : 0072: 389-ds:1.4 (ALINUX3-SA-2026:0072)	Nessus	Alibaba Cloud Linux Local Security Checks	2026/4/21	2026/4/21	high
313635	SUSE SLES15 Security Update : 389-ds (SUSE-SU-2026:1753-1)	Nessus	SuSE Local Security Checks	2026/5/10	2026/5/10	high
299805	Linux Distros Unpatched Vulnerability : CVE-2025-14905	Nessus	Misc.	2026/2/23	2026/11/5	high

検出

プラグインの検索

high

high

high

high

high

high

high

high

high

high

high