Wiz Agents & Workflows are here

CVE-2025-14905
Rocky Linux vulnerability analysis and mitigation

A flaw was found in the 389-ds-base server. A heap buffer overflow vulnerability exists in the schema_attr_enum_callback function within the schema.c file. This occurs because the code incorrectly calculates the buffer size by summing alias string lengths without accounting for additional formatting characters. When a large number of aliases are processed, this oversight can lead to a heap overflow, potentially allowing a remote attacker to cause a Denial of Service (DoS) or achieve Remote Code Execution (RCE).


SourceNVD

Related Rocky Linux vulnerabilities:

CVE ID

Severity

Score

Technologies

Component name

CISA KEV exploit

Has fix

Published date

CVE-2026-4111HIGH7.5
  • Rocky LinuxRocky Linux
  • libarchive-devel
NoYesMar 13, 2026
CVE-2026-26130HIGH7.5
  • C#C#
  • aspnetcore-runtime-8.0
NoYesMar 10, 2026
CVE-2026-26127HIGH7.5
  • C#C#
  • Microsoft.NetCore.App.Runtime.win-arm
NoYesMar 10, 2026
CVE-2025-12801MEDIUM6.5
  • Rocky LinuxRocky Linux
  • linux-azure-fips
NoYesMar 04, 2026
CVE-2026-26104MEDIUM5.5
  • NixOSNixOS
  • udisks2-lsm
NoYesFeb 25, 2026

Free Vulnerability Assessment

Benchmark your Cloud Security Posture

Evaluate your cloud security practices across 9 security domains to benchmark your risk level and identify gaps in your defenses.

Request assessment

Get a personalized demo

Ready to see Wiz in action?

"Best User Experience I have ever seen, provides full visibility to cloud workloads."
David EstlickCISO
"Wiz provides a single pane of glass to see what is going on in our cloud environments."
Adam FletcherChief Security Officer
"We know that if Wiz identifies something as critical, it actually is."
Greg PoniatowskiHead of Threat and Vulnerability Management