Bug 2336100 (CVE-2025-0306)

Summary: CVE-2025-0306 ruby: openssl: Ruby Marvin Attack
Product: [Other] Security Response Reporter: OSIDB Bzimport <bzimport>
Component: vulnerabilityAssignee: Product Security DevOps Team <prodsec-dev>
Status: NEW --- QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: hkario
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
A vulnerability was found in Ruby. The Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging a large number of messages with the vulnerable service.
 Story Points: ---
Clone Of: Environment:
Last Closed: Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 2336102, 2336103, 2336104    
Bug Blocks:    

Description OSIDB Bzimport 2025-01-07 11:19:32 UTC 
Ruby interpreter is vulnerable to the Marvin Attack. This attack allows the attacker to decrypt previously encrypted messages or forge signatures by exchanging large number of messages with the vulnerable service.

The attacker needs to be able to directly or indirectly measure the time of calling to RSA::private_decrypt() or PKey::decrypt() and the error handling of those methods. Attacks over network are possible if network service can be made to perform calls to those functions with attacker controlled messages.
Comment 1 Alicja Kario 2025-01-07 12:13:29 UTC 
The issue can be workarounded by using Ruby with OpenSSL that implements implicit rejection (http://github.com/openssl/openssl/pull/13817), first included upstream in the 3.2.0 release.

That feature has also been backported to:
 - RHEL-9.2.z: http://access.redhat.com/errata/RHSA-2024:0500
 - RHEL-8.9.z: http://access.redhat.com/errata/RHSA-2023:7877
 - RHEL-8.8 EUS: http://access.redhat.com/errata/RHSA-2024:0154
 - RHEL-8.6 EUS: http://access.redhat.com/errata/RHSA-2024:0208