CVE-2025-0306

HIGH EPSS 45.5%

Published Jan 9, 20251y ago · Modified Jun 17, 20262w ago

7.4 CVSS 3.1

High

Published Jan 9, 2025 1y ago

Last Modified Jun 17, 2026 2w ago

Description

A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.

CVSS Details

Base Score

7.4

Exploitability

2.2

Impact

5.2

Vector string

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Attack Vector Network

Attack Complexity High

Privileges Required None

User Interaction None

Scope Unchanged

Confidentiality High

Integrity High

Availability None

Threat Intelligence

EPSS Exploit Probability

45.5% percentile

Exploit & Patch Status

No Known Exploit

No Patch Available

Weaknesses 1

CWE-385

References 3

access.redhat.com https://access.redhat.com/security/cve/CVE-2025-0306
bugzilla.redhat.com https://bugzilla.redhat.com/show_bug.cgi?id=2336100
security.netapp.com https://security.netapp.com/advisory/ntap-20250221-0009/

Remediation

No remediation data recorded yet

Check vendor advisories and the NVD entry for patch availability.