Red Hat Security Advisory: 389-ds-base security update
A null pointer dereference vulnerability (CVE-2025-2487) has been identified in 389 Directory Server (389-ds-base), an LDAPv3 compliant server used in Red Hat Enterprise Linux 9. This flaw can lead to a denial of service condition. Red Hat has issued a security advisory (RHSA-2025:7395) addressing this issue with updated packages for multiple Red Hat Enterprise Linux 9 variants and architectures. The vulnerability is rated as moderate severity by Red Hat Product Security. No CVSS score is provided in the advisory.
AI Analysis
Technical Summary
The vulnerability CVE-2025-2487 in 389-ds-base involves a null pointer dereference that can cause the LDAP server to crash, resulting in denial of service. This affects the 389 Directory Server base packages included in Red Hat Enterprise Linux 9 and related variants. Red Hat has released updated packages to fix this issue as detailed in advisory RHSA-2025:7395. The advisory covers multiple architectures and extended update support versions of Red Hat Enterprise Linux 9. No CVSS score is provided in the advisory, but the impact is a denial of service.
Potential Impact
Successful exploitation of this vulnerability results in denial of service by causing the 389 Directory Server to crash due to a null pointer dereference. This disrupts LDAP services on affected systems, potentially impacting directory-based authentication and other LDAP-dependent services. There is no indication of code execution or data compromise from the provided information.
Mitigation Recommendations
Red Hat has released updated 389-ds-base packages that address this vulnerability. Users of Red Hat Enterprise Linux 9 and its variants should apply the security update as described in Red Hat advisory RHSA-2025:7395 and the update instructions at https://access.redhat.com/articles/11258. Applying the official patch is the recommended mitigation. No additional mitigations or workarounds are indicated in the advisory.
Red Hat Security Advisory: 389-ds-base security update
Description
A null pointer dereference vulnerability (CVE-2025-2487) has been identified in 389 Directory Server (389-ds-base), an LDAPv3 compliant server used in Red Hat Enterprise Linux 9. This flaw can lead to a denial of service condition. Red Hat has issued a security advisory (RHSA-2025:7395) addressing this issue with updated packages for multiple Red Hat Enterprise Linux 9 variants and architectures. The vulnerability is rated as moderate severity by Red Hat Product Security. No CVSS score is provided in the advisory.
Affected software
pkg:rpm/redhat/389-ds-baseRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability CVE-2025-2487 in 389-ds-base involves a null pointer dereference that can cause the LDAP server to crash, resulting in denial of service. This affects the 389 Directory Server base packages included in Red Hat Enterprise Linux 9 and related variants. Red Hat has released updated packages to fix this issue as detailed in advisory RHSA-2025:7395. The advisory covers multiple architectures and extended update support versions of Red Hat Enterprise Linux 9. No CVSS score is provided in the advisory, but the impact is a denial of service.
Potential Impact
Successful exploitation of this vulnerability results in denial of service by causing the 389 Directory Server to crash due to a null pointer dereference. This disrupts LDAP services on affected systems, potentially impacting directory-based authentication and other LDAP-dependent services. There is no indication of code execution or data compromise from the provided information.
Mitigation Recommendations
Red Hat has released updated 389-ds-base packages that address this vulnerability. Users of Red Hat Enterprise Linux 9 and its variants should apply the security update as described in Red Hat advisory RHSA-2025:7395 and the update instructions at https://access.redhat.com/articles/11258. Applying the official patch is the recommended mitigation. No additional mitigations or workarounds are indicated in the advisory.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:7395
- Cve Count
- 1
- Additional Cves
- []
- Cvss Version
- null
Threat ID: 6a4049e927e9c79719835d13
Added to database: 06/27/2026, 22:08:41 UTC
Last enriched: 06/27/2026, 22:38:21 UTC
Last updated: 07/04/2026, 20:51:19 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.