The remote RockyLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2026:73519 advisory.

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

    * rubygem-mongo: MongoDB Ruby Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88030)

Tenable has extracted the preceding description block directly from the RockyLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 10 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2026-72785 advisory.

    [3.3.12-15]
    - Fix memory exhaustion via unknown DNS resource types in resolv.
      (CVE-2026-80212)       Resolves: RHEL-252031

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 10.2 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-2026_72427 advisory.

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

Tenable has extracted the preceding description block directly from the CIQ security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1957:01 advisory.

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2026-130360 advisory.

    An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,     Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for     each unknown DNS resource record (type, class) pair, or each unknown SvcParamKey, encountered while     decoding a response. Each generated class was permanently registered both as a constant on Resource (or     SvcParam::Generic) and as an entry in a class-lookup hash (ClassHash), and thus the class remained     reachable through that constant after the response was discarded. Type and class are each 16-bit values,     and thus an attacker controlling DNS responses (a spoofed response, or a malicious or hijacked upstream     DNS server) has roughly 2^32 distinct (type, class) pairs to choose from. A single response of a few     hundred kilobytes carrying tens of thousands of distinct unknown types permanently grows process memory by     tens of megabytes; repeated responses accumulate without bound and are never reclaimed by garbage     collection, because the constant keeps each class alive. Any code path that calls     Resolv::DNS::Message.decode on attacker-influenced DNS responses is affected. resolv is a default gem, and     thus this is reachable from a plain Ruby installation without any additional dependency.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:83570 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 9 host has packages installed that are affected by a vulnerability as referenced in the AXSA:2026-1987:01 advisory.

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2026:72785 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The Rocky Linux 9.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare ALMALINUX9.6:CLSA-2026:1789644305 advisory.

  - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::Resource.get_class,     Resolv::DNS::Resource::Generic.create, and Resolv::DNS::SvcParam::Generic.create generate a new class for     each unknown DNS resource record (type, class) pair, or each unknown SvcParamKey, encountered while     decoding a response. Each generated class was permanently registered both as a constant on Resource (or     SvcParam::Generic) and as an entry in a class-lookup hash (ClassHash), and thus the class remained     reachable through that constant after the response was discarded. Type and class are each 16-bit values,     and thus an attacker controlling DNS responses (a spoofed response, or a malicious or hijacked upstream     DNS server) has roughly 2^32 distinct (type, class) pairs to choose from. A single response of a few     hundred kilobytes carrying tens of thousands of distinct unknown types permanently grows process memory by     tens of megabytes; repeated responses accumulate without bound and are never reclaimed by garbage     collection, because the constant keeps each class alive. Any code path that calls     Resolv::DNS::Message.decode on attacker-influenced DNS responses is affected. resolv is a default gem, and     thus this is reachable from a plain Ruby installation without any additional dependency. (CVE-2026-80212)

  - An issue was discovered in the resolv gem before 0.7.2 for Ruby. Resolv::DNS::MessageEncoder wrote a DNS     label's length into a single octet without checking its range. A label longer than 255 octets had its     length stored modulo 256 but the label data was written unchanged, and thus the bytes on the wire     described a different name than the one the application asked to encode. RFC 1035 section 2.3.4 limits a     label to 63 octets, and the two high bits of the length octet are reserved for compression pointers.
    put_string packed the length with put_pack(C, d.length) and put_label used it for labels, and thus any     value from 0 to 255 could end up as a label length octet, including the reserved 0x40-0xBF range and the     0xC0-0xFF pointer range. Resolv::DNS::Name.create did not check per-label or total name length either, and     thus an attacker-controlled hostname reached the encoder unchanged. An application that resolves an     attacker-controlled hostname sends a query whose wire bytes name a domain the attacker chose. A hostname     suffix that the application validates against an allowlist becomes padding that never appears on the wire,     and thus allowlist and egress checks can be bypassed. The recursive resolver caches the response under the     attacker's name, and DNS logs record that name rather than the one the application asked for. A label     length whose low octet lands in the 0xC0-0xFF range produces a length octet that conforming parsers read     as the start of a compression pointer, with the following attacker-controlled byte as the offset.
    (CVE-2026-80213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2026:73519 advisory.

    Ruby is an extensible, interpreted, object-oriented, scripting language. It has features to process text     files and to perform system management tasks.

    Security Fix(es):

    * resolv: resolv gem: Denial of Service via uncontrolled memory growth from crafted DNS responses     (CVE-2026-80212)

    * rubygem-mongo: MongoDB Ruby Driver: Data disclosure and denial of service via query-operator injection     (CVE-2026-88030)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
358445	RockyLinux 8 : ruby:2.5 (RLSA-2026:73519)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	medium
350944	Oracle Linux 10 : ruby (ELSA-2026-72785)	Nessus	Oracle Linux Local Security Checks	9/29/2026	9/29/2026	high
359540	Rocky Linux 10.2 [CIQ] Security Update: ruby4.0 / ruby4.0-debuginfo / ruby4.0-debugsource / ruby4.0-devel / etc (crlsa-2026_72427)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	high
362909	MiracleLinux 9 : ruby:3.3 (AXSA:2026-1957:01)	Nessus	Miracle Linux Local Security Checks	10/4/2026	10/6/2026	high
366273	Unity Linux 20.1070e Security Update: ruby (UTSA-2026-130360)	Nessus	Unity Linux Local Security Checks	10/15/2026	10/15/2026	high
366218	RHEL 10 : ruby (RHSA-2026:83570)	Nessus	Red Hat Local Security Checks	10/15/2026	10/15/2026	high
363864	MiracleLinux 9 : ruby:4.0 (AXSA:2026-1987:01)	Nessus	Miracle Linux Local Security Checks	10/7/2026	10/20/2026	high
362672	RHEL 10 : ruby (RHSA-2026:72785)	Nessus	Red Hat Local Security Checks	10/2/2026	10/21/2026	high
360299	Rocky Linux 9.6 [TuxCare] Security Update: ruby / ruby-default-gems / ruby-devel / ruby-doc / ruby-libs / etc Multiple Vulnerabilities (ALMALINUX9.6:CLSA-2026:1789644305)	Nessus	Rocky Linux Local Security Checks	10/1/2026	10/1/2026	medium
353428	RHEL 8 : ruby:2.5 (RHSA-2026:73519)	Nessus	Red Hat Local Security Checks	9/30/2026	9/30/2026	medium

Detections

Analytics

Plugins Search

medium

high

high

high

high

high

high

high

medium

medium