Debian/ruby3.3: high 7.5
The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: DEBIAN-CVE-2025-24294#Debian:14/ruby3.3
- https://security-tracker.debian.org/tracker/CVE-2025-24294
published · modified · JSON