The remote RockyLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23141 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)

    * rexml: REXML denial of service (CVE-2025-58767)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23063 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)
      * rexml: REXML denial of service (CVE-2025-58767)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23062 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)
      * rexml: REXML denial of service (CVE-2025-58767)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of FreeBSD installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the eed1a411-699b-11f0-91fe-000c295725e4 advisory.

    Manu reports:

                The vulnerability is caused by an insufficient check on                 the length of a decompressed domain name within a DNS                 packet.


                An attacker can craft a malicious DNS packet containing a                 highly compressed domain name. When the resolv library                 parses such a packet, the name decompression process                 consumes a large amount of CPU resources, as the library                 does not limit the resulting length of the name.


                This resource consumption can cause the application thread                 to become unresponsive, resulting in a Denial of Service                 condition.


Tenable has extracted the preceding description block directly from the FreeBSD security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLED15 / SLED_SAP15 / SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2025:4264-1 advisory.

    - CVE-2024-35221: Fixed remote DoS via YAML manifest (bsc#1225905)
    - CVE-2024-47220: Fixed HTTP request smuggling in WEBrick (bsc#1230930)
    - CVE-2024-49761: Fixed ReDOS vulnerability by updating REXML to 3.3.9 (bsc#1232440)
    - CVE-2025-24294: Fixed denial of service (DoS) caused by an insufficient check on the length       of a decompressed domain name within a DNS packet in resolv gem (bsc#1246430)
    - CVE-2025-27219: Fixed denial of service in CGI::Cookie.parse (bsc#1237804)
    - CVE-2025-27220: Fixed ReDoS in CGI::Util#escapeElement (bsc#1237806)
    - CVE-2025-27221: Fixed userinfo leakage in URI#join, URI#merge and URI#+ (bsc#1237805)
    - CVE-2025-6442: Fixed ruby WEBrick read_header HTTP request smuggling vulnerability (bsc#1245254)

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

According to the versions of the ruby packages installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    REJECTED Rejected reason: The RubyGems maintainers determined that the reported symlink-following behavior     during gem extraction is not a security vulnerability, so no vulnerability exists for this record to     describe.(CVE-2026-82455)

    zlib is a Ruby interface for the zlib compression/decompression library. Versions 3.0.0 and below, 3.1.0,     3.1.1, 3.2.0 and 3.2.1 contain a buffer overflow vulnerability in the Zlib::GzipReader. The     zstream_buffer_ungets function prepends caller-provided bytes ahead of previously produced output but     fails to guarantee the backing Ruby string has enough capacity before the memmove shifts the existing     data. This can lead to memory corruption when the buffer length exceeds capacity. This issue has been     fixed in versions 3.0.1, 3.1.2 and 3.2.3.(CVE-2026-27820)

    The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient     check on the length of a decompressed domain name within a DNS packet._x000D_
    _x000D_     An attacker can craft a malicious DNS packet containing a highly compressed domain name. When the resolv     library parses such a packet, the name decompression process consumes a large amount of CPU resources, as     the library does not limit the resulting length of the name._x000D_
    _x000D_     This resource consumption can cause the application thread to become unresponsive, resulting in a Denial     of Service condition.(CVE-2025-24294)

    An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS     label's length into a single octet without checking its range. A label longer than 255 octets had its     length stored modulo 256 but the label data was written unchanged, and thus the bytes on the wire     described a different name than the one the application asked to encode. RFC 1035 section 2.3.4 limits a     label to 63 octets, and the two high bits of the length octet are reserved for compression pointers.
    put_string packed the length with put_pack('C', d.length) and put_label used it for labels, and thus any     value from 0 to 255 could end up as a label length octet, including the reserved 0x40-0xBF range and the     0xC0-0xFF pointer range. Resolv::DNS::Name.create did not check per-label or total name length either, and     thus an attacker-controlled hostname reached the encoder unchanged. An application that resolves an     attacker-controlled hostname sends a query whose wire bytes name a domain the attacker chose. A hostname     suffix that the application validates against an allowlist becomes padding that never appears on the wire,     and thus allowlist and egress checks can be bypassed. The recursive resolver caches the response under the     attacker's name, and DNS logs record that name rather than the one the application asked for. A label     length whose low octet lands in the 0xC0-0xFF range produces a length octet that conforming parsers read     as the start of a compression pointer, with the following attacker-controlled byte as the     offset.(CVE-2026-80213)

    Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5     and 0.5.15, several Net::IMAP commands accept a 'raw data' argument that is sent verbatim after validation     to prevent command injection. However, if a server does not support non-synchronizing literals, it may     still be possible to inject arbitrary IMAP commands inside non-synchronizing literals.  A server without     support for non-synchronizing literals may interpret the '+}\r\n' as the end of a malformed command line     and respond with a tagged BAD. In that case, the contents of the literal will be interpreted as one or     more new pipelined commands, allowing a CRLF command injection attack to succeed. This affects criteria     for #search and #uid_search; search_keys for #sort, #thread, #uid_sort, and #uid_thread; and attr for     #fetch and #uid_fetch. This vulnerability is fixed in 0.6.5 and 0.5.15.(CVE-2026-47240)

    Net::IMAP implements Internet Message Access Protocol (IMAP) client functionality in Ruby. Prior to 0.6.5     and 0.5.15, several Net::IMAP commands accept a raw string argument which is only validated to prevent     CRLF injection and then sent verbatim. If this string is derived from user-controlled input, an attacker     can force the next command to be absorbed as a continuation of the first command. This will cause the     first command to eventually fail, but also prevents it from returning until another command is sent (from     another thread). That other command will not return until the connection is closed. This vulnerability is     fixed in 0.6.5 and 0.5.15.(CVE-2026-47241)

    An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,     Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for     each unknown DNS resource record (type, class) pair, or each unknown SvcParamKey, encountered while     decoding a response. Each generated class was permanently registered both as a constant on Resource (or     SvcParam::Generic) and as an entry in a class-lookup hash (ClassHash), and thus the class remained     reachable through that constant after the response was discarded. Type and class are each 16-bit values,     and thus an attacker controlling DNS responses (a spoofed response, or a malicious or hijacked upstream     DNS server) has roughly 2^32 distinct (type, class) pairs to choose from. A single response of a few     hundred kilobytes carrying tens of thousands of distinct unknown types permanently grows process memory by     tens of megabytes; repeated responses accumulate without bound and are never reclaimed by garbage     collection, because the constant keeps each class alive. Any code path that calls     Resolv::DNS::Message.decode on attacker-influenced DNS responses is affected. resolv is a default gem, and     thus this is reachable from a plain Ruby installation without any additional dependency.(CVE-2026-80212)

Tenable has extracted the preceding description block directly from the EulerOS ruby security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23063 advisory.

    - Fix possible denial of service in resolv gem (CVE-2025-24294)
    - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:23927 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)

    * rexml: REXML denial of service (CVE-2025-58767)

    * git-lfs: Git LFS may write to arbitrary files via crafted symlinks (CVE-2025-26625)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2025:23062 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)

    * rexml: REXML denial of service (CVE-2025-58767)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by a vulnerability as referenced in the ALAS2023-2025-1131 advisory.

    The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient     check on the length of a decompressed domain name within a DNS packet.An attacker can craft a malicious     DNS packet containing a highly compressed domain name. When the resolv library parses such a packet, the     name decompression process consumes a large amount of CPU resources, as the library does not limit the     resulting length of the name.This resource consumption can cause the application thread to become     unresponsive, resulting in a Denial of Service condition. (CVE-2025-24294)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2025:23141 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)
      * rexml: REXML denial of service (CVE-2025-58767)

Tenable has extracted the preceding description block directly from the AlmaLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2025-11557:01 advisory.

    * resolv: Denial of Service in resolv gem (CVE-2025-24294)
      * rexml: REXML denial of service (CVE-2025-58767)
      * When using the + operator to combine URIs, sensitive information like passwords from the original URI     can be leaked,          violating RFC3986 and making applications vulnerable to credential exposure. (CVE-2025-61594)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2025-23062 advisory.

    - Fix possible denial of service in resolv gem (CVE-2025-24294)
    - Fix URI Credential Leakage Bypass previous fixes. (CVE-2025-61594)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
281624	RockyLinux 10 : ruby (RLSA-2025:23141)	Nessus	Rocky Linux Local Security Checks	2026/1/3	2026/2/25	medium
282338	AlmaLinux 9 : ruby:3.3 (ALSA-2025:23063)	Nessus	Alma Linux Local Security Checks	2026/1/7	2026/2/25	medium
282339	AlmaLinux 8 : ruby:3.3 (ALSA-2025:23062)	Nessus	Alma Linux Local Security Checks	2026/1/7	2026/2/25	medium
242862	FreeBSD : rubygem-resolv -- Possible denial of service (eed1a411-699b-11f0-91fe-000c295725e4)	Nessus	FreeBSD Local Security Checks	2025/7/26	2025/7/26	high
277246	SUSE SLED15: libruby2_5-2_5 / ruby2.5 / ruby2.5-devel / ruby2.5-devel-extra / etc (SUSE-SU-2025:4264-1)	Nessus	SuSE Local Security Checks	2025/12/3	2026/6/26	high
376680	EulerOS 2.0 SP12 : ruby (EulerOS-SA-2026-4530)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	medium
278561	Oracle Linux 9 : ruby:3.3 (ELSA-2025-23063)	Nessus	Oracle Linux Local Security Checks	2025/12/12	2026/2/25	medium
279550	RHEL 10 : ruby (RHSA-2025:23927)	Nessus	Red Hat Local Security Checks	2025/12/22	2025/12/22	high
281623	RockyLinux 8 : ruby:3.3 (RLSA-2025:23062)	Nessus	Rocky Linux Local Security Checks	2026/1/3	2026/2/25	medium
243497	Amazon Linux 2023 : ruby3.2, ruby3.2-bundled-gems, ruby3.2-default-gems (ALAS2023-2025-1131)	Nessus	Amazon Linux Local Security Checks	2025/8/4	2025/8/14	high
281887	AlmaLinux 10 : ruby (ALSA-2025:23141)	Nessus	Alma Linux Local Security Checks	2026/1/6	2026/2/25	medium
282681	MiracleLinux 9 : ruby:3.3 (AXSA:2025-11557:01)	Nessus	Miracle Linux Local Security Checks	2026/1/13	2026/2/25	medium
278394	Oracle Linux 8 : ruby:3.3 (ELSA-2025-23062)	Nessus	Oracle Linux Local Security Checks	2025/12/11	2026/2/25	medium

检测

插件搜索

medium

medium

medium

high

high

medium

medium

high

medium

high

medium

medium

medium