PT-2025-31391 · Ruby-Saml+1 · Ruby-Saml+1

Dblessing · Published 2025-07-30 · Updated 2025-09-02 · CVE-2025-54572

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Medium

Base vector

AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions ruby-saml versions 1.18.0 and below

Description The Ruby SAML library, used for implementing the client side of a SAML authorization, contains a denial-of-service vulnerability. The message max bytesize setting, intended to prevent resource exhaustion, is ineffective due to the order of operations in the code. Specifically, the SAML response is validated for Base64 format before checking the message size. This can lead to excessive memory consumption, high CPU utilization, application slowdowns, and potential application crashes, ultimately resulting in a denial of service for legitimate users. The vulnerability exists in the decode raw saml function where the base64 encoded? function performs regex matching on the entire input string before checking the message size.

Recommendations ruby-saml versions prior to 1.18.1 are affected. Update to version 1.18.1 or later to resolve this issue.

Exploit

Fix

DoS

Resource Exhaustion

Allocation of Resources Without Limits

Weakness Enumeration

CWE-400

CWE-770

Related Identifiers

CVE-2025-54572

DLA-4288-1

GHSA-RRQH-93C8-J966

Affected Products

Debian

Ruby-Saml

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/54xxx/CVE-2025-54572.json · Exploit
• 🔥 https://github.com/rubysec/ruby-advisory-db/blob/master/gems/ruby-saml/CVE-2025-54572.yml · Exploit
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-54572 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-54572 · Security Note
• https://osv.dev/vulnerability/UBUNTU-CVE-2025-54572 · Vendor Advisory
• https://ubuntu.com/security/CVE-2025-54572 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-4288-1 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2025-54572 · Security Note
• https://osv.dev/vulnerability/GHSA-rrqh-93c8-j966 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-54572 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-54572 · Vendor Advisory
• https://github.com/SAML-Toolkits/ruby-saml · Note
• https://github.com/SAML-Toolkits/ruby-saml/pull/770 · Note
• https://github.com/SAML-Toolkits/ruby-saml/security/advisories/GHSA-rrqh-93c8-j966 · Note
• https://github.com/SAML-Toolkits/ruby-saml/commit/38ef5dd1ce17514e202431f569c4f5633e6c2709 · Note