USN-7734-1: ruby2.5 Ubuntu

Vulnerability summary

USN-7734-1 is a vulnerability in ruby2.5 Ubuntu with no CVSS score yet.

Timeline

1. 03-09-2025
   PublishedVulnerability first disclosed.
2. 27-04-2026
   Last modifiedVulnerability information updated.

Description

ruby2.5, ruby2.7, ruby3.0, ruby3.2, ruby3.3 vulnerabilities It was discovered that Ruby incorrectly handled certain IO stream methods. A remote attacker could use this issue to cause Ruby to crash, resulting in a denial of service, or possibly obtain sensitive information. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27280) It was discovered that the Ruby regex compiler incorrectly handled certain memory operations. A remote attacker could possibly use this issue to obtain sensitive memory contents. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-27282) It was discovered that Ruby incorrectly handled parsing of certain XML characters through the REXML gem. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. This issue only affected Ubuntu 18.04 LTS. (CVE-2024-35176) It was discovered that Ruby incorrectly handled decompressed domain names within a DNS packet. An attacker could use this issue to cause Ruby to crash, resulting in a denial of service. (CVE-2025-24294)

No weakness data has been published for this record.