REDHAT-BUG-2485425: Medium severity Red Hat 389 Directory Server vulnerability
The ldaputf8prev() function in 389 Directory Server unconditionally reads up to 6 bytes before a heap allocation because it lacks a lower-bound parameter. This API design flaw has existed since the Mozilla LDAP C SDK import and was symptomatically patched twice without fixing the root cause. Twenty call sites remain vulnerable to 1-6 byte heap over-reads.
Cannot be triggered via standard LDAP wire protocol (BER filters parsed separately), but internal callers processing attacker-influenced data (plugin configuration, ACI definitions, replication) are affected. ASan confirmed on aarch64; no crash on production binaries.
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2485425?
The severity of REDHAT-BUG-2485425 is categorized as medium with a score of 4.
How do I fix REDHAT-BUG-2485425?
To fix REDHAT-BUG-2485425, update to the latest patch provided by Red Hat for 389 Directory Server.
What are the risks associated with REDHAT-BUG-2485425?
The risks associated with REDHAT-BUG-2485425 include potential memory corruption due to an unconditional read before heap allocation.
What software is affected by REDHAT-BUG-2485425?
The software affected by REDHAT-BUG-2485425 is Red Hat 389 Directory Server.
When was REDHAT-BUG-2485425 published?
REDHAT-BUG-2485425 was published on June 5, 2026.