PT-2025-28418 · Ruby+9 · Resolve+10

·

CVE-2025-24294

·

Published

2025-07-08

·

Updated

2026-08-30

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: Ruby (affected versions not specified)
Description: The issue is related to a possible Denial of Service in the resolv gem. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

DoS

Resource Exhaustion

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALSA-2025:23062
ALSA-2025:23063
ALSA-2025:23141
AZL-65202
AZL-65241
BDU:2025-15238
CVE-2025-24294
ECHO-1466-059C-A8C5
GHSA-XH69-987W-HRP8
OESA-2026-3533
OESA-2026-3534
OESA-2026-3535
OESA-2026-3536
OESA-2026-3537
RHSA-2025:23062
RHSA-2025:23063
RHSA-2025:23141
RHSA-2025:23648
RHSA-2025:23927
SUSE-SU-2025:3776-1
SUSE-SU-2025:4264-1
SUSE-SU-2025_3776-1
USN-7734-1
USN-7735-1

Affected Products

Almalinux
Centos
Debian
Linuxmint
Red Hat
Red Os
Rocky Linux
Ruby
Suse
Ubuntu
Resolve