CVE-2025-0306
A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.
Scoring
- Severity
- HIGH
- CVSS base score
- 7.4
- CVSS vector
- CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
- EPSS probability
- 0.65%
- CWE
- CWE-385
- Published
- 2025-01-09
- Last modified
- 2026-06-30
Weakness type
Related vulnerabilities
- CVE-2026-84308 — phpseclib — non-constant-time X25519 scalar multiplication permits full private-key recovery
- CVE-2026-55785 — free5GC AUSF uses non-constant-time authentication comparisons and logs XRES* in 5G-AKA
- CVE-2026-6478 — PostgreSQL discloses MD5-hashed passwords via covert timing channel
- CVE-2026-5598 — Non-constant time comparisons risk private key leakage in FrodoKEM.
- CVE-2025-59425 — vLLM vulnerable to timing attack at bearer auth
- CVE-2025-9231 — Timing side-channel in SM2 algorithm on 64 bit ARM
- CVE-2025-59432 — Timing Attack Vulnerability in SCRAM Authentication
- CVE-2025-49087 — In Mbed TLS 3.6.1 through 3.6.3 before 3.6.4, a timing discrepancy in block cipher padding removal...