CVE-2025-2487
389-ds-base: null pointer dereference leads to denial of service
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- High
- User interaction
- None
What an attacker can affect
- Confidentiality
- None
- Integrity
- None
- Availability
- High
Exploit likelihood
What each source reports
CVE List Score used
389-ds-base: null pointer dereference leads to denial of service
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
CVE-2025-2487- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-05
EUVDEUVD-2025-6692
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
EUVD-2025-6692- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-05
GitHub AdvisoriesGHSA-33fh-4pvq-9x35
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP...
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
GHSA-33fh-4pvq-9x35- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-02
NVD
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
CVE-2025-2487- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-05
OSV
389-ds-base: null pointer dereference leads to denial of service
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
CVE-2025-2487- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Weakness
- CWE-476
- Updated
- 2026-11-07
OSVDEBIAN-CVE-2025-2487
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
DEBIAN-CVE-2025-2487- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-06
Show 13 moreShow less
OSVOESA-2025-1373
three-eight-nine-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.
Security Fix(es):
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.(CVE-2025-2487)
- Record
OESA-2025-1373- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVOESA-2025-1374
three-eight-nine-ds-base security update
389-ds-base is an LDAPv3 compliant server which includes the LDAP server and command line utilities for server administration.
Security Fix(es):
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.(CVE-2025-2487)
- Record
OESA-2025-1374- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:3663
Red Hat Security Advisory: 389-ds-base security update
- Record
RHSA-2025:3663- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:3670
Red Hat Security Advisory: redhat-ds:12 security update
- Record
RHSA-2025:3670- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:4491
Red Hat Security Advisory: 389-ds-base security update
- Record
RHSA-2025:4491- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRHSA-2025:7395
Red Hat Security Advisory: 389-ds-base security update
- Record
RHSA-2025:7395- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:4491
Moderate: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:4491- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVRLSA-2025:7395
Moderate: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
RLSA-2025:7395- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVUBUNTU-CVE-2025-2487
A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash.
- Record
UBUNTU-CVE-2025-2487- CVSS 3.1
- 4.9 Medium
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H - Updated
- 2026-11-02
OSVALSA-2025:4491 No score
Moderate: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:4491- Updated
- 2026-11-02
OSVALSA-2025:7395 No score
Moderate: 389-ds-base security update
389 Directory Server is an LDAP version 3 (LDAPv3) compliant server. The base packages include the Lightweight Directory Access Protocol (LDAP) server and command-line utilities for server administration.
Security Fix(es):
- 389-ds-base: null pointer dereference leads to denial of service (CVE-2025-2487)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
- Record
ALSA-2025:7395- Updated
- 2026-11-02
OSVCLSA-2026-1778892584 No score
389-ds-base: Fix of 3 CVEs
- CVE-2024-5953: fix DoS via malformed password hash on bind
- CVE-2024-2199: fix DoS via malformed userPassword modify
- CVE-2025-2487: fix NULL pointer deref on failed MODDN operations
- Record
CLSA-2026-1778892584- Updated
- 2026-11-02
OSVopenSUSE-SU-2025:14934-1 No score
389-ds-3.1.2~git55.7fbd4526-1.1 on GA media
These are all security issues fixed in the 389-ds-3.1.2~git55.7fbd4526-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2025:14934-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseAlmaLinux:9 |
before 2.5.2-9.el9_5 | 2.5.2-9.el9_5 |
389-ds-base-develAlmaLinux:9 |
before 2.5.2-9.el9_5 | 2.5.2-9.el9_5 |
389-ds-base-libsAlmaLinux:9 |
before 2.5.2-9.el9_5 | 2.5.2-9.el9_5 |
389-ds-base-snmpAlmaLinux:9 |
before 2.5.2-9.el9_5 | 2.5.2-9.el9_5 |
python3-lib389AlmaLinux:9 |
before 2.5.2-9.el9_5 | 2.5.2-9.el9_5 |
389-ds-baseAlmaLinux:9 |
before 2.6.1-8.el9_6 | 2.6.1-8.el9_6 |
389-ds-base-develAlmaLinux:9 |
before 2.6.1-8.el9_6 | 2.6.1-8.el9_6 |
389-ds-base-libsAlmaLinux:9 |
before 2.6.1-8.el9_6 | 2.6.1-8.el9_6 |
389-ds-base-snmpAlmaLinux:9 |
before 2.6.1-8.el9_6 | 2.6.1-8.el9_6 |
python3-lib389AlmaLinux:9 |
before 2.6.1-8.el9_6 | 2.6.1-8.el9_6 |
Show 68 moreShow less
| Package | Affected | Fixed |
|---|---|---|
389-ds-baseTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 2.2.4-5.el9_2.tuxcare.els4 | 2.2.4-5.el9_2.tuxcare.els4 |
389-ds-base-develTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 2.2.4-5.el9_2.tuxcare.els4 | 2.2.4-5.el9_2.tuxcare.els4 |
389-ds-base-libsTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 2.2.4-5.el9_2.tuxcare.els4 | 2.2.4-5.el9_2.tuxcare.els4 |
389-ds-base-snmpTuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 2.2.4-5.el9_2.tuxcare.els4 | 2.2.4-5.el9_2.tuxcare.els4 |
python3-lib389TuxCare:AlmaLinux:9.2 From an advisory covering 3 CVEs |
before 2.2.4-5.el9_2.tuxcare.els4 | 2.2.4-5.el9_2.tuxcare.els4 |
389-ds-baseDebian:12 |
All versions, plus listed versions 2.3.1+dfsg1-12.3.1+dfsg1-1+deb12u12.3.4+dfsg1-12.3.4+dfsg1-1.12.4.4+dfsg1-1 Show 13 moreShow less2.4.4+dfsg1-32.4.5+dfsg1-13.0.2+dfsg1-13.1.1+dfsg1-13.1.1+dfsg1-23.1.1+dfsg1-33.1.2+dfsg1-13.1.2+vendor1-13.1.2+vendor1-23.3.0-13.3.0-23.3.1-13.3.1-3 |
None known |
389-ds-baseDebian:13 |
before 3.1.2+dfsg1-1 | 3.1.2+dfsg1-1 |
three-eight-nine-ds-baseopenEuler:24.03-LTS-SP1 |
before 389-ds-base-3.1.1-6.oe2403sp1 | 389-ds-base-3.1.1-6.oe2403sp1 |
three-eight-nine-ds-baseopenEuler:24.03-LTS |
before 389-ds-base-3.1.1-6.oe2403 | 389-ds-base-3.1.1-6.oe2403 |
389-ds-baseRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-debugsourceRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-libsRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-libs-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-snmp-debuginfoRed Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
python3-lib389Red Hat:rhel_eus:9.4::appstream |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-debuginfoRed Hat:rhel_eus:9.4::crb |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-debugsourceRed Hat:rhel_eus:9.4::crb |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-develRed Hat:rhel_eus:9.4::crb |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-libs-debuginfoRed Hat:rhel_eus:9.4::crb |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-base-snmp-debuginfoRed Hat:rhel_eus:9.4::crb |
before 0:2.4.5-14.el9_4 | 0:2.4.5-14.el9_4 |
389-ds-baseRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-debuginfoRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-debugsourceRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-develRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-libsRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-libs-debuginfoRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-snmpRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-base-snmp-debuginfoRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
cockpit-389-dsRed Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
python3-lib389Red Hat:directory_server_eus:12.4::el9 |
before 0:2.4.5-12.module+el9dsrv+22976+238a2ead | 0:2.4.5-12.module+el9dsrv+22976+238a2ead |
389-ds-baseRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-libsRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-libs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-snmpRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-snmp-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
python3-lib389Red Hat:enterprise_linux:9::appstream |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-develRed Hat:enterprise_linux:9::crb |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-libs-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-base-snmp-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-baseRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-debugsourceRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-libsRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-libs-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-snmpRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-snmp-debuginfoRed Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
python3-lib389Red Hat:enterprise_linux:9::appstream |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-debugsourceRed Hat:enterprise_linux:9::crb |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-develRed Hat:enterprise_linux:9::crb |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-libs-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-base-snmp-debuginfoRed Hat:enterprise_linux:9::crb |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-baseRocky Linux:9 |
before 0:2.5.2-9.el9_5 | 0:2.5.2-9.el9_5 |
389-ds-baseRocky Linux:9 |
before 0:2.6.1-8.el9_6 | 0:2.6.1-8.el9_6 |
389-ds-baseUbuntu:Pro:16.04:LTS |
All versions, plus listed versions 1.3.3.12-1build11.3.3.13-11.3.4.5-21.3.4.8-11.3.4.8-3 Show 4 moreShow less1.3.4.8-3ubuntu11.3.4.8-41.3.4.9-11.3.4.9-1ubuntu0.1~esm1 |
None known |
389-ds-baseUbuntu:Pro:18.04:LTS |
All versions, plus listed versions 1.3.7.5-11.3.7.5-1build11.3.7.5-1build21.3.7.9-11.3.7.10-11.3.7.10-1ubuntu11.3.7.10-1ubuntu1+esm1 |
None known |
389-ds-baseUbuntu:Pro:20.04:LTS |
All versions, plus listed versions 1.4.1.6-41.4.1.6-4build11.4.2.4-11.4.2.4-1build11.4.3.2-11.4.3.2-1build11.4.3.6-21.4.3.6-2ubuntu0.1~esm1 |
None known |
389-ds-baseUbuntu:22.04:LTS |
All versions, plus listed versions 1.4.4.11-2build11.4.4.11-2build21.4.4.17-12.0.11-22.0.14-12.0.15-12.0.15-1ubuntu2 |
None known |
389-ds-baseUbuntu:24.04:LTS |
All versions, plus listed versions 2.3.4+dfsg1-12.4.4+dfsg1-1ubuntu12.4.4+dfsg1-1ubuntu42.4.4+dfsg1-32.4.5+dfsg1-1 |
None known |
389-ds-baseUbuntu:25.10 |
All versions, plus listed versions 3.1.2+dfsg1-1 |
None known |
389-ds-baseUbuntu:26.10 |
All versions, plus listed versions 3.1.2+vendor1-23.1.2+vendor1-2build13.3.1-3 |
None known |
389-ds-baseUbuntu:26.04:LTS |
All versions, plus listed versions 3.1.2+dfsg1-13.1.2+vendor1-2 |
None known |
389-dsopenSUSE:Tumbleweed |
before 3.1.2~git55.7fbd4526-1.1 | 3.1.2~git55.7fbd4526-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | OSV | |
| affected | NVD, OSV | |
| facts | CVE List, EUVD | |
| first indexed | CVE List, EUVD, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2025-2487 is a medium vulnerability (CVSS 4.9) in Red Hat Directory Server 12, published March 18, 2025. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.60%, the 48th percentile. Fixed in 389-ds-base 2.5.2-9.el9_5.
References
access.redhat.com/errata/RHSA-2025:3663
bugzilla.redhat.com/show_bug.cgi?id=2353071
Show 24 moreShow less
github.com/389ds/389-ds-base/security/advisories/GHSA-426r-w669-66gw
nvd.nist.gov/vuln/detail/CVE-2025-2487
errata.almalinux.org/9/ALSA-2025-4491.html
errata.tuxcare.com/els_os/almalinux9.2esu/CLSA-2026-1778892584.html
security-tracker.debian.org/tracker/CVE-2025-2487
openeuler.org/zh/security/security-bulletins/detail?id=openEuler-SA-2025-1373
security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_3663.json
cve.org/CVERecord?id=CVE-2025-2487
errata.rockylinux.org/RLSA-2025:4491
ubuntu.com/security/CVE-2025-2487
lists.opensuse.org/archives/list/[email protected]/thread/IOFOA4ZKJPKCPTBVPQNJTATQO7NXBNQW
suse.com/security/cve/CVE-2025-2487