Erlang

Otp

61 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
2.3

CVE-2026-21620

  • EPSS 0.46%
  • Veröffentlicht 20.02.2026 11:15:56
  • Zuletzt bearbeitet 24.07.2026 15:17:13

Relative Path Traversal, Improper Isolation or Compartmentalization vulnerability in erlang otp erlang/otp (tftp_file modules), erlang otp inets (tftp_file modules), erlang otp tftp (tftp_file modules) allows Relative Path Traversal. This vulnerabili...

7.1

CVE-2025-48041

  • EPSS 0.39%
  • Veröffentlicht 11.09.2025 08:14:20
  • Zuletzt bearbeitet 24.07.2026 15:17:06

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from...

6.9

CVE-2025-48040

  • EPSS 0.43%
  • Veröffentlicht 11.09.2025 08:14:19
  • Zuletzt bearbeitet 24.07.2026 15:17:06

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 before OT...

5.3

CVE-2025-48039

  • EPSS 0.39%
  • Veröffentlicht 11.09.2025 08:13:36
  • Zuletzt bearbeitet 24.07.2026 15:17:05

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue af...

5.3

CVE-2025-48038

  • EPSS 0.39%
  • Veröffentlicht 11.09.2025 08:13:04
  • Zuletzt bearbeitet 24.07.2026 15:17:05

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue af...

4.8

CVE-2025-4748

  • EPSS 0.24%
  • Veröffentlicht 16.06.2025 11:15:18
  • Zuletzt bearbeitet 24.07.2026 15:17:07

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl ...

3.7

CVE-2025-46712

  • EPSS 0.53%
  • Veröffentlicht 08.05.2025 19:26:27
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Erlang/OTP is a set of libraries for the Erlang programming language. In versions prior to OTP-27.3.4 (for OTP-27), OTP-26.2.5.12 (for OTP-26), and OTP-25.3.2.21 (for OTP-25), Erlang/OTP SSH fails to enforce strict KEX handshake hardening measures by...

10

CVE-2025-32433

Warnung Medienbericht Exploit
  • EPSS 98.59%
  • Veröffentlicht 16.04.2025 21:34:37
  • Zuletzt bearbeitet 04.11.2025 14:49:05

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in S...

7.5

CVE-2025-30211

  • EPSS 0.44%
  • Veröffentlicht 28.03.2025 14:55:47
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits...

7

CVE-2025-26618

  • EPSS 0.48%
  • Veröffentlicht 20.02.2025 19:15:11
  • Zuletzt bearbeitet 15.04.2026 00:35:42

Erlang is a programming language and runtime system for building massively scalable soft real-time systems with requirements on high availability. OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use...