CVE-2025-0306
Ruby: openssl: ruby marvin attack
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Ruby: openssl: ruby marvin attack
A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.
Reserved 2025-01-07 | Published 2025-01-09 | Updated 2025-01-09 | Assigner redhat| 2025-01-07: | Reported to Red Hat. |
| 2024-06-24: | Made public. |
This issue was discovered by Alicja Kario (Red Hat).
access.redhat.com/security/cve/CVE-2025-0306
bugzilla.redhat.com/show_bug.cgi?id=2336100 (RHBZ#2336100)
Support options
