CVE catalog

CVE-2025-24294

Ruby vulnerabilities

Severity: Medium · CVSS 5.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L
Published: Jul 7, 2025, 10:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.66% · Oct 25, 2026

The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name. This resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	ruby3.1	bookworm	`3.1.2-7+deb12u1`	vulnerable
Debian	ruby3.1	bookworm-security	`3.1.2-7+deb12u1`	vulnerable
Ubuntu	ruby3.1	noble	Not reported	vulnerable
Ubuntu	ruby3.2	noble	`3.2.3-1ubuntu0.24.04.6`	fixed
Ubuntu	libruby3.2	noble	`3.2.3-1ubuntu0.24.04.6`	fixed
Ubuntu	ruby3.2-dev	noble	`3.2.3-1ubuntu0.24.04.6`	fixed
Ubuntu	ruby3.2-doc	noble	`3.2.3-1ubuntu0.24.04.6`	fixed
Suse	ruby2.5	linux enterprise module for basesystem 15 sp6	`2.5.9-150000.4.54.1`	fixed
Opensuse	ruby2.5	leap 15.6	`2.5.9-150000.4.54.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	ruby3.1	source	bookworm	`(unfixed)`	not yet assigned	Not reported	Not reported
Ubuntu	ruby3.2	deb	noble	`3.2.3-1ubuntu0.24.04.6`	Not reported	Not reported	Not reported
Ubuntu	libruby3.2	deb	noble	`3.2.3-1ubuntu0.24.04.6`	Not reported	Not reported	Not reported
Ubuntu	ruby3.2-dev	deb	noble	`3.2.3-1ubuntu0.24.04.6`	Not reported	Not reported	Not reported
Ubuntu	ruby3.2-doc	deb	noble	`3.2.3-1ubuntu0.24.04.6`	Not reported	Not reported	Not reported
Suse	ruby2.5	rpm	linux enterprise module for basesystem 15 sp6	`2.5.9-150000.4.54.1`	Not reported	SUSE-SU-2025:3776-1	Not reported
Opensuse	ruby2.5	rpm	leap 15.6	`2.5.9-150000.4.54.1`	Not reported	SUSE-SU-2025:3776-1	Not reported

Notes

[bookworm] ruby3.1: Minor issue

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[libruby3.1]Affected
Source package: [ruby3.1]
Details (4)
- 3.1.2-7+deb12u1 · amd64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · amd64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
[ruby3.1]Affected
Details (4)
- 3.1.2-7+deb12u1 · amd64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · amd64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
[ruby3.1-dev]Affected
Source package: [ruby3.1]
Details (4)
- 3.1.2-7+deb12u1 · amd64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · amd64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · arm64 · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
[ruby3.1-doc]Affected
Source package: [ruby3.1]
Details (4)
- 3.1.2-7+deb12u1 · all · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · all · bookworm
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · all · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12
- 3.1.2-7+deb12u1 · all · bookworm-security
  Affected
  usn · ruby3.1 · debian · bookworm; usn · ruby3.1 · debian · 12

[Debian 13 (Trixie)]

[libruby3.3]Affected
Source package: [ruby3.3]
Details (2)
- 3.3.8-2 · amd64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
- 3.3.8-2 · arm64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
[ruby3.3]Affected
Details (2)
- 3.3.8-2 · amd64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
- 3.3.8-2 · arm64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
[ruby3.3-dev]Affected
Source package: [ruby3.3]
Details (2)
- 3.3.8-2 · amd64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
- 3.3.8-2 · arm64 · trixie
  Affected
  usn · ruby3.3 · debian · 13
[ruby3.3-doc]Affected
Source package: [ruby3.3]
Details (2)
- 3.3.8-2 · all · trixie
  Affected
  usn · ruby3.3 · debian · 13
- 3.3.8-2 · all · trixie
  Affected
  usn · ruby3.3 · debian · 13

Observed: Oct 24, 2026, 9:16:39 PM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]