Resource Exhaustion Affecting rubygem-abrt-doc package, versions <0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca


Severity

Recommended
0.0
medium
0
10

Based on Rocky Linux security rating.

Threat Intelligence

EPSS
0.02% (5th percentile)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Resource Exhaustion vulnerabilities in an interactive lesson.

Start learning
  • Snyk IDSNYK-ROCKY8-RUBYGEMABRTDOC-14858851
  • published4 Jan 2026
  • disclosed17 Sept 2025

Introduced: 17 Sep 2025

CVE-2025-58767  (opens in a new tab)
CWE-400  (opens in a new tab)

How to fix?

Upgrade Rocky-Linux:8 rubygem-abrt-doc to version 0:0.4.0-1.module+el8.10.0+1741+bdb5b6ca or higher.
This issue was patched in RLSA-2025:23062.

NVD Description

Note: Versions mentioned in the description apply only to the upstream rubygem-abrt-doc package and not the rubygem-abrt-doc package as distributed by Rocky-Linux. See How to fix? for Rocky-Linux:8 relevant fixed versions and status.

REXML is an XML toolkit for Ruby. The REXML gems from 3.3.3 to 3.4.1 has a DoS vulnerability when parsing XML containing multiple XML declarations. If you need to parse untrusted XMLs, you may be impacted to these vulnerabilities. The REXML gem 3.4.2 or later include the patches to fix these vulnerabilities.

CVSS Base Scores

version 3.1