Every CVE Search/ Get API key

CVE-2022-37026

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...

9.8 CriticalFix available

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.49%Up 0.6 points since Sep 22, 2022
90%50%10%1%

What each source reports

NVD Score used 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
CVE List 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
EUVDEUVD-2022-39680 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
EUVD-2022-39680
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-f399-ff4w-62fm 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
GHSA-f399-ff4w-62fm
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-287
Updated
2026-11-02
OSVALPINE-CVE-2022-37026 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
ALPINE-CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSV 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
Show 15 moreShow less
OSVDEBIAN-CVE-2022-37026 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
DEBIAN-CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVOESA-2023-1912 9.8

erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson.

Security Fix(es):

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.(CVE-2022-37026)

Record
OESA-2023-1912
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1941 9.8

erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson.

Security Fix(es):

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.(CVE-2022-37026)

Record
OESA-2023-1941
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1942 9.8

erlang security update

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson.

Security Fix(es):

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.(CVE-2022-37026)

Record
OESA-2023-1942
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2022:8857 9.4

Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (erlang) security update

Record
RHSA-2022:8857
CVSS 3.1
9.4 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:L
Updated
2026-11-02
OSVUBUNTU-CVE-2022-37026 9.8

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.

Record
UBUNTU-CVE-2022-37026
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2022-0450 No score

Updated erlang packages fix security vulnerability

In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. (CVE-2022-37026)

Record
MGASA-2022-0450
Updated
2026-11-02
OSVopenSUSE-SU-2024:12416-1 No score

erlang-25.1.1-1.1 on GA media

These are all security issues fixed in the erlang-25.1.1-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:12416-1
Updated
2026-11-02
OSVopenSUSE-SU-2025:15740-1 No score

erlang27-27.1.3-1.1 on GA media

These are all security issues fixed in the erlang27-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15740-1
Updated
2026-11-02
OSVSUSE-SU-2022:4215-1 No score

Security update for erlang

This update for erlang fixes the following issues:

  • CVE-2022-37026: fixed a client authorization bypass vulnerability for SSL, TLS, and DTLS in Erlang/OTP. [bsc#1205318]
Record
SUSE-SU-2022:4215-1
Updated
2026-11-02
OSVSUSE-SU-2022:4222-1 No score

Security update for erlang

This update for erlang fixes the following issues:

  • CVE-2022-37026: fixed a client authorization bypass vulnerability for SSL, TLS, and DTLS in Erlang/OTP. [bsc#1205318]
Record
SUSE-SU-2022:4222-1
Updated
2026-11-02
OSVSUSE-SU-2023:3401-1 No score

Security update for erlang

This update for erlang fixes the following issues:

  • Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)
Record
SUSE-SU-2023:3401-1
Updated
2026-11-02
OSVSUSE-SU-2023:3409-1 No score

Security update for erlang

This update for erlang fixes the following issues:

  • Replaced the CVE-2022-37026 patch with the one released by the upstream to fix a regression in the previous one. (bsc#1205318)
Record
SUSE-SU-2023:3409-1
Updated
2026-11-02
OSVSUSE-SU-2023:4109-1 No score

Security update for erlang

This update for erlang fixes the following issues:

  • Updated to version 23.3.4.19 (jsc#PED-6209):
    • CVE-2022-37026: Complete a previous insufficient fix for an authentication bypass (bsc#1205318).
Record
SUSE-SU-2023:4109-1
Updated
2026-11-02
OSVUSN-6059-1 No score

erlang vulnerability

It was discovered that Erlang did not properly implement TLS client certificate validation during the TLS handshake. A remote attacker could use this issue to bypass client authentication.

Record
USN-6059-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
erlang
Alpine:v3.16
 before 24.3.4.6-r0
24.3.4.6-r0
erlang
Alpine:v3.17
 before 25.0.3-r0
25.0.3-r0
erlang
Alpine:v3.18
 before 25.0.3-r0
25.0.3-r0
erlang
Alpine:v3.19
 before 25.0.3-r0
25.0.3-r0
erlang
Alpine:v3.20
 before 25.0.3-r0
25.0.3-r0
erlang
Alpine:v3.21
 before 25.0.3-r0
25.0.3-r0
erlang26
Alpine:v3.22
 before 25.0.3-r0
25.0.3-r0
erlang
Debian:12
 before 1:24.3.4.5+dfsg-1
1:24.3.4.5+dfsg-1
erlang
Debian:13
 before 1:24.3.4.5+dfsg-1
1:24.3.4.5+dfsg-1
erlang
Debian:14
 before 1:24.3.4.5+dfsg-1
1:24.3.4.5+dfsg-1
Show 79 moreShow less
Affected packages
PackageAffectedFixed
erlang
Debian:10
 before 1:22.2.7+dfsg-1+deb10u1, plus listed versions
1:21.2.6+dfsg-11:21.2.6+dfsg-1+hurd.11:22.0+dfsg-11:22.0.1+dfsg-11:22.0.3+dfsg-1
Show 24 moreShow less
1:22.0.4+dfsg-11:22.0.5+dfsg-11:22.0.5+dfsg-21:22.0.7+dfsg-11:22.0.7+dfsg-21:22.0.7+dfsg-31:22.0~rc1+dfsg-11:22.0~rc2+dfsg-11:22.0~rc3+dfsg-11:22.1+dfsg-11:22.1.1+dfsg-11:22.1.1+dfsg-21:22.1.1+dfsg-31:22.1.5+dfsg-11:22.1.6+dfsg-11:22.1.7+dfsg-11:22.1.8+dfsg-11:22.2+dfsg-11:22.2.1+dfsg-11:22.2.2+dfsg-11:22.2.3+dfsg-11:22.2.3+dfsg-21:22.2.4+dfsg-11:22.2.7+dfsg-1
1:22.2.7+dfsg-1+deb10u1
erlang
Mageia:8
 before 23.2.1-3.2.mga8
23.2.1-3.2.mga8
erlang
openEuler:22.03-LTS
 before 23.3.4.9-3.oe2203
23.3.4.9-3.oe2203
erlang
openEuler:22.03-LTS-SP1
 before 23.3.4.9-3.oe2203sp1
23.3.4.9-3.oe2203sp1
erlang
openEuler:22.03-LTS-SP2
 before 23.3.4.9-3.oe2203sp2
23.3.4.9-3.oe2203sp2
erlang
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-asn1
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-asn1-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-compiler
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-crypto
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-crypto-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-debugsource
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-eldap
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-erl_interface-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-erts
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-erts-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-hipe
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-inets
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-kernel
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-mnesia
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-odbc-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-os_mon
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-os_mon-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-parsetools
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-public_key
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-runtime_tools
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-runtime_tools-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-sasl
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-snmp
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-ssl
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-stdlib
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-syntax_tools
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-tools
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-tools-debuginfo
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang-xmerl
Red Hat:openstack:16.2::el8
 before 0:23.3.4.18-1.el8ost
0:23.3.4.18-1.el8ost
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP3
 before 22.3-150300.3.3.1
22.3-150300.3.3.1
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 22.3-150300.3.3.1
22.3-150300.3.3.1
erlang
openSUSE:Leap 15.3
 before 22.3-150300.3.3.1
22.3-150300.3.3.1
erlang
openSUSE:Leap 15.4
 before 22.3-150300.3.3.1
22.3-150300.3.3.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP2-ESPOS
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Linux Enterprise Server 15 SP2-BCL
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Manager Proxy 4.1
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Manager Retail Branch Server 4.1
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Manager Server 4.1
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Enterprise Storage 7
 before 22.2.7-150200.3.3.1
22.2.7-150200.3.3.1
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Manager Proxy 4.2
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Manager Server 4.2
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Enterprise Storage 7.1
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
openSUSE:Leap 15.4
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
openSUSE:Leap 15.5
 before 22.3-150300.3.8.1
22.3-150300.3.8.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 22.2.7-150200.3.8.1
22.2.7-150200.3.8.1
erlang
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 22.2.7-150200.3.8.1
22.2.7-150200.3.8.1
erlang
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 22.2.7-150200.3.8.1
22.2.7-150200.3.8.1
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP4
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Linux Enterprise Module for Server Applications 15 SP5
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Manager Proxy 4.2
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Manager Server 4.2
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
SUSE:Enterprise Storage 7.1
 before 23.3.4.19-150300.3.11.1
23.3.4.19-150300.3.11.1
erlang
Ubuntu:Pro:14.04:LTS
 All versions, plus listed versions
1:16.b.1-dfsg-4ubuntu11:16.b.2-dfsg-1ubuntu11:16.b.2-dfsg-2ubuntu11:16.b.3-dfsg-1ubuntu11:16.b.3-dfsg-1ubuntu2
Show 5 moreShow less
1:16.b.3-dfsg-1ubuntu2.11:16.b.3-dfsg-1ubuntu2.21:16.b.3-dfsg-1ubuntu2.2+esm11:16.b.3-dfsg-1ubuntu2.2+esm21:16.b.3-dfsg-1ubuntu2.2+esm3
 None known
erlang
Ubuntu:Pro:16.04:LTS
 All versions, plus listed versions
1:18.0-dfsg-1ubuntu11:18.0-dfsg-1ubuntu21:18.2-dfsg-2ubuntu11:18.3-dfsg-1ubuntu11:18.3-dfsg-1ubuntu2
Show 6 moreShow less
1:18.3-dfsg-1ubuntu31:18.3-dfsg-1ubuntu3.11:18.3-dfsg-1ubuntu3.1+esm11:18.3-dfsg-1ubuntu3.1+esm21:18.3-dfsg-1ubuntu3.1+esm31:18.3-dfsg-1ubuntu3.1+esm4
 None known
erlang
Ubuntu:Pro:18.04:LTS
 All versions, plus listed versions
1:20.0.4+dfsg-1ubuntu11:20.1.2+dfsg-1ubuntu11:20.1.3+dfsg-1ubuntu11:20.1.4+dfsg-1ubuntu11:20.1.5+dfsg-1ubuntu1
Show 9 moreShow less
1:20.1.6+dfsg-1ubuntu11:20.1.7+dfsg-1ubuntu11:20.2.1+dfsg-1ubuntu11:20.2.2+dfsg-1ubuntu11:20.2.2+dfsg-1ubuntu21:20.2.2+dfsg-1ubuntu2+esm11:20.2.2+dfsg-1ubuntu2+esm21:20.2.2+dfsg-1ubuntu2+esm31:20.2.2+dfsg-1ubuntu2+esm4
 None known
erlang
Ubuntu:20.04:LTS
 before 1:22.2.7+dfsg-1ubuntu0.2, plus listed versions
1:22.0.7+dfsg-1build11:22.2+dfsg-11:22.2.1+dfsg-11:22.2.2+dfsg-11:22.2.3+dfsg-11:22.2.3+dfsg-21:22.2.4+dfsg-11:22.2.7+dfsg-1
1:22.2.7+dfsg-1ubuntu0.2
erlang
Ubuntu:22.04:LTS
 before 1:24.2.1+dfsg-1ubuntu0.1, plus listed versions
1:23.2.6+dfsg-1build11:24.1.1+dfsg-11:24.1.4+dfsg-11:24.1.5+dfsg-11:24.1.5+dfsg-1ubuntu11:24.2+dfsg-11:24.2.1+dfsg-1
1:24.2.1+dfsg-1ubuntu0.1
erlang
openSUSE:Tumbleweed
 before 25.1.1-1.1
25.1.1-1.1
erlang27
openSUSE:Tumbleweed
From an advisory covering 5 CVEs
 before 27.1.3-1.1
27.1.3-1.1

History

History
RecordedChangedSources
affected, factsOSV
affected, aliases, referencesOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2022-37026 is a critical vulnerability (CVSS 9.8) in Erlang Erlang\/otp, published September 21, 2022. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.49%, the 74th percentile. Fixed in erlang 24.3.4.6-r0.

References

Show 32 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open