CVE-2025-25293: GHSL-2024-355: DoS in ruby-saml - CVE-2025-25293
Summary ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses.
Ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after.
Impact This issue may lead to remote Denial of Service (DoS).
Other sources
ruby-saml provides security assertion markup language (SAML) single sign-on (SSO) for Ruby. Prior to versions 1.12.4 and 1.18.0, ruby-saml is susceptible to remote Denial of Service (DoS) with compressed SAML responses. ruby-saml uses zlib to decompress SAML responses in case they're compressed. It is possible to bypass the message size check with a compressed assertion since the message size is checked before inflation and not after. This issue may lead to remote Denial of Service (DoS). Versions 1.12.4 and 1.18.0 fix the issue.
— NVD
ruby-saml was susceptible to remote Denial of Service (DoS) with compressed SAML responses.
— GitHub Security Lab
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-25293?
CVE-2025-25293 has a high severity rating due to its potential for remote Denial of Service (DoS).
How do I fix CVE-2025-25293?
To fix CVE-2025-25293, upgrade ruby-saml to version 1.18.0 or later.
What systems are affected by CVE-2025-25293?
CVE-2025-25293 affects ruby-saml versions from 1.13.0 up to 1.18.0 and below version 1.12.4.
What type of attack does CVE-2025-25293 facilitate?
CVE-2025-25293 facilitates a remote Denial of Service (DoS) attack using compressed SAML responses.
Is there a workaround for CVE-2025-25293?
Currently, the only reliable workaround for CVE-2025-25293 is to update to the fixed versions of ruby-saml.