Denial Of Service (DoS)

🗓️ 18 Jul 2025 05:52:33Reported by Veracode Vulnerability DatabaseType

Vulnerability in resolv library allows Denial Of Service via crafted DNS packets causing CPU overload.

Reporter	Title	Published	Views	Family All 112
IBM Security Bulletins	Security Bulletin: EDB PGAI Databases is affected by Multiple Vulnerabilities.	7 Apr 202613:55	–	ibm
IBM Security Bulletins	Security Bulletin: Astronomer with IBM is vulnerable to denial of service due to the resolv package (CVE-2025-24294)	20 Nov 202514:27	–	ibm
Tenable Nessus	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-1131)	4 Aug 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2 : ruby (ALAS-2025-2957)	4 Aug 202500:00	–	nessus
Tenable Nessus	AlmaLinux 8 : ruby:3.3 (ALSA-2025:23062)	7 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 9 : ruby:3.3 (ALSA-2025:23063)	7 Jan 202600:00	–	nessus
Tenable Nessus	AlmaLinux 10 : ruby (ALSA-2025:23141)	6 Jan 202600:00	–	nessus
Tenable Nessus	FreeBSD : rubygem-resolv -- Possible denial of service (eed1a411-699b-11f0-91fe-000c295725e4)	26 Jul 202500:00	–	nessus
Tenable Nessus	MiracleLinux 8 : ruby:3.3 (AXSA:2025-11546:01)	13 Jan 202600:00	–	nessus
Tenable Nessus	MiracleLinux 9 : ruby:3.3 (AXSA:2025-11557:01)	13 Jan 202600:00	–	nessus

Vulners

Node

resolv resolvRange0.4.0–0.6.1ruby

resolv resolvMatch0.3.0ruby

resolv resolvRange0.1.0–0.2.2ruby

resolv resolvMatch0.1.0ruby

resolv resolvMatch0.2.0ruby

resolv resolvMatch0.2.1ruby

resolv resolvMatch0.4.0ruby

resolv resolvMatch0.5.0ruby

resolv resolvMatch0.6.0ruby

Source	Link
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/resolv/CVE-2025-24294.yml
github	www.github.com/ruby/resolv/commit/4c2f71b5e80826506f78417d85b38481c058fb25
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-24294
ruby-lang	www.ruby-lang.org/en/news/2025/07/08/dos-resolv-cve-2025-24294
github	www.github.com/ruby/resolv

03 Jun 2026 10:02Current

5.8Medium risk

Vulners AI Score5.8

CVSS 3.17.5

EPSS0.00268

SSVC