resolv vulnerabilities

2 known vulnerabilities in resolv from Ruby. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  resolv: Allocation of Resources Without Limits or Throttling

  CVE-2026-80212Aug 27, 2026Ruby

  An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class, Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for each unknown DNS resource record (type, class) pair, or

• 7.5 High severity

  resolv: Uncontrolled Resource Consumption

  CVE-2025-24294Jul 12, 2025Ruby

  The attack vector is a potential Denial of Service (DoS). The vulnerability is caused by an insufficient check on the length of a decompressed domain name within a DNS packet. An attacker can craft a malicious DNS packet containing a highly compressed domain n