The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the name decompression process consumes a large amount of CPU resources, as the library does not limit the resulting length of the name. This resource consumption can cause the application thread to become unresponsive, resulting in a Denial of Service condition.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade rubygem-psychUpgrade rubygem-minitestUpgrade rubygem-irbUpgrade rubygem-mysql2Upgrade rubygem-typeprofUpgrade rubygem-power_assertUpgrade rubygemsUpgrade rubygem-mysql2-docUpgrade rubygem-test-unitUpgrade rubygem-pgUpgrade rubygem-abrt-docUpgrade rubygem-rdocUpgrade rubygem-abrtUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade rubygem-bundlerUpgrade ruby-default-gemsUpgrade rubyUpgrade ruby-develUpgrade rubygem-rakeUpgrade ruby-docUpgrade rubygems-develUpgrade ruby-libsUpgrade ruby-bundled-gemsUpgrade rubygem-jsonUpgrade rubygem-bigdecimalUpgrade rubygem-rexmlUpgrade rubygem-raccUpgrade rubygem-io-consoleUpgrade rubygem-pg-doc | Jan 8, 2026 | Dec 10, 2025 |
| Amazon Linux Ami 2 | — | Upgrade ruby-docUpgrade rubygem-bigdecimalUpgrade ruby-debuginfoUpgrade rubygems-develUpgrade rubygemsUpgrade rubygem-rdocUpgrade rubygem-psychUpgrade ruby-develUpgrade ruby-libsUpgrade rubygem-rakeUpgrade rubyUpgrade ruby-irbUpgrade rubygem-minitestUpgrade ruby-tcltkUpgrade rubygem-io-consoleUpgrade rubygem-json | May 20, 2026 | May 20, 2026 |
| Amazon_linux_2023 | — | Upgrade ruby3.2-rubygem-test-unitUpgrade ruby3.2-debugsourceUpgrade ruby3.2-rubygem-power_assertUpgrade ruby3.2-default-gemsUpgrade ruby3.2-rubygem-rssUpgrade ruby3.2-rubygem-io-console-debuginfoUpgrade ruby3.2-rubygem-psychUpgrade ruby3.2-rubygem-io-consoleUpgrade ruby3.2-bundled-gems-debuginfoUpgrade ruby3.2-rubygemsUpgrade ruby3.2-rubygem-json-debuginfoUpgrade ruby3.2-bundled-gemsUpgrade ruby3.2-libsUpgrade ruby3.2-rubygem-irbUpgrade ruby3.2-rubygem-bundlerUpgrade ruby3.2-docUpgrade ruby3.2-libs-debuginfoUpgrade ruby3.2-rubygem-bigdecimal-debuginfoUpgrade ruby3.2-rubygem-minitestUpgrade ruby3.2-rubygem-rexmlUpgrade ruby3.2-rubygem-psych-debuginfoUpgrade ruby3.2-rubygem-rakeUpgrade ruby3.2-rubygem-typeprofUpgrade ruby3.2-debuginfoUpgrade ruby3.2-rubygem-rbs-debuginfoUpgrade ruby3.2-rubygem-jsonUpgrade ruby3.2Upgrade ruby3.2-rubygems-develUpgrade ruby3.2-develUpgrade ruby3.2-rubygem-bigdecimalUpgrade ruby3.2-rubygem-rdocUpgrade ruby3.2-rubygem-rbs | Aug 5, 2025 | Jul 12, 2025 |
| Debian | — | Upgrade ruby2.7No solution exists | Jul 16, 2025 | Jul 12, 2025 |
| Freebsd | — | Upgrade rubyUpgrade ruby35Upgrade ruby32Upgrade rubygem-resolvUpgrade ruby33Upgrade ruby34 | Jul 26, 2025 | Jul 25, 2025 |
| Oracle_linux | — | Upgrade rubygem-pgUpgrade rubygem-psychUpgrade rubygem-rdocUpgrade rubygemsUpgrade rubygem-abrtUpgrade rubygem-jsonUpgrade ruby-bundled-gemsUpgrade rubygem-rssUpgrade rubygem-rbsUpgrade ruby-default-gemsUpgrade rubyUpgrade rubygem-test-unitUpgrade rubygem-mysql2Upgrade rubygem-typeprofUpgrade ruby-libsUpgrade rubygem-abrt-docUpgrade rubygem-rexmlUpgrade rubygem-minitestUpgrade rubygem-io-consoleUpgrade rubygem-raccUpgrade rubygem-mysql2-docUpgrade rubygem-pg-docUpgrade rubygem-power_assertUpgrade rubygem-bigdecimalUpgrade ruby-docUpgrade ruby-develUpgrade rubygems-develUpgrade rubygem-irbUpgrade rubygem-bundlerUpgrade rubygem-rake | Dec 15, 2025 | Jul 12, 2025 |
| Redhat_linux | — | Upgrade rubygem-pg-debuginfoUpgrade ruby-libsUpgrade rubygem-rbs-debuginfoUpgrade ruby-debuginfoUpgrade rubygem-rexmlUpgrade rubygem-io-consoleUpgrade rubygem-json-debuginfoUpgrade rubygem-psychUpgrade rubygem-mysql2-debugsourceUpgrade rubygems-develUpgrade rubygem-typeprofUpgrade rubygem-test-unitUpgrade ruby-debugsourceUpgrade rubygem-rakeUpgrade rubygem-abrt-docUpgrade rubygem-racc-debuginfoUpgrade rubygem-raccUpgrade rubygem-bigdecimalUpgrade rubygem-rdocUpgrade rubygem-pg-debugsourceUpgrade ruby-default-gemsUpgrade rubygemsUpgrade rubygem-abrtUpgrade rubygem-psych-debuginfoUpgrade rubygem-rssUpgrade rubyUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-mysql2Upgrade rubygem-rbsUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-irbUpgrade rubygem-pg-docUpgrade ruby-docNo solution existsUpgrade rubygem-bigdecimal-debuginfoUpgrade rubygem-bundlerUpgrade ruby-develUpgrade ruby-bundled-gemsUpgrade rubygem-power_assertUpgrade rubygem-minitestUpgrade rubygem-jsonUpgrade rubygem-io-console-debuginfoUpgrade rubygem-pgUpgrade rubygem-mysql2-doc | Jul 17, 2025 | Jul 12, 2025 |
| Rocky_linux | — | Upgrade rubygem-pg-debugsourceUpgrade rubygem-pg-debuginfoUpgrade rubygem-io-consoleUpgrade ruby-debuginfoUpgrade rubygem-rbsUpgrade ruby-develUpgrade rubygem-io-console-debuginfoUpgrade rubygem-mysql2-debuginfoUpgrade rubygem-bigdecimalUpgrade ruby-bundled-gemsUpgrade rubygem-mysql2Upgrade rubygem-rbs-debuginfoUpgrade rubygem-raccUpgrade rubyUpgrade rubygem-mysql2-debugsourceUpgrade rubygem-pgUpgrade rubygem-json-debuginfoUpgrade rubygem-psych-debuginfoUpgrade rubygem-bigdecimal-debuginfoUpgrade ruby-libsUpgrade ruby-bundled-gems-debuginfoUpgrade ruby-libs-debuginfoUpgrade rubygem-jsonUpgrade ruby-debugsourceUpgrade rubygem-racc-debuginfoUpgrade rubygem-psych | Feb 5, 2026 | Jan 3, 2026 |
| Suse | — | Upgrade ruby2.5-stdlibUpgrade libruby2_5-2_5Upgrade ruby2.5-devel-extraUpgrade ruby2.5-doc-riUpgrade ruby2.5-docUpgrade ruby2.5-develUpgrade ruby2.5 | Dec 5, 2025 | Oct 24, 2025 |
| Ubuntu | — | Upgrade libruby3.0Upgrade ruby3.2Upgrade libruby3.2Upgrade ruby-rubygemsUpgrade libruby2.5 (Ubuntu Pro)Upgrade ruby3.0Upgrade libruby3.3Upgrade ruby2.7 (Ubuntu Pro)Upgrade ruby2.5 (Ubuntu Pro)Upgrade libruby2.7 (Ubuntu Pro)Upgrade ruby3.3 | Jul 25, 2025 | Jul 12, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub