CVE-2025-2487

{"id": "CVE-2025-2487", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.9, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:H", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "NONE"}, "impactScore": 3.6, "exploitabilityScore": 1.2}]}, "published": "2025-03-18T17:15:48.883", "references": [{"url": "https://access.redhat.com/errata/RHSA-2025:3663", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/errata/RHSA-2025:3670", "source": "secalert@redhat.com"}, {"url": "https://access.redhat.com/security/cve/CVE-2025-2487", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2353071", "source": "secalert@redhat.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-476"}]}], "descriptions": [{"lang": "en", "value": "A flaw was found in the 389-ds-base LDAP Server. This issue occurs when issuing a Modify DN LDAP operation through the ldap protocol, when the function return value is not tested and a NULL pointer is dereferenced. If a privileged user performs a ldap MODDN operation after a failed operation, it could lead to a Denial of Service (DoS) or system crash."}, {"lang": "es", "value": "Se detect\u00f3 una falla en 389-ds-base LDAP Server. Este problema ocurre al ejecutar una operaci\u00f3n LDAP de Modificar DN mediante el protocolo LDAP, cuando no se prueba el valor de retorno de la funci\u00f3n y se desreferencia un puntero NULL. Si un usuario con privilegios realiza una operaci\u00f3n LDAP MODDN despu\u00e9s de una operaci\u00f3n fallida, podr\u00eda provocar una denegaci\u00f3n de servicio (DoS) o un bloqueo del sistema."}], "lastModified": "2025-04-08T05:15:39.930", "sourceIdentifier": "secalert@redhat.com"}