CVE-2025-0306

Published: Jan 9, 2025Modified: Jun 30, 2026Deferred

7.4

Vector

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Exploitability: 2.2 / Impact: 5.2

Source: secalert@redhat.com (Secondary)

Description

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.

Related CWEs

CWE-385

Covert Timing Channel

Covert timing channels convey information by modulating some aspect of system behavior over time, so that the program receiving the information can observe system behavior and infer protected information.

References (3)

https://access.redhat.com/security/cve/CVE-2025-0306

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2336100

Source: secalert@redhat.com

https://security.netapp.com/advisory/ntap-20250221-0009/

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.