erlang vulnerabilities (Debian)
76 vulnerabilities.
erlangDebianSFTP root escape via component-agnostic prefix check in ssh_sftpd5.3 MediumerlangDebianTFTP Path Traversal2.3 LowerlangDebianSSH_FXP_OPENDIR may Lead to Exhaustion of File Handles7.1 HigherlangDebianMalicious Key Exchange Messages may Lead to Excessive Resource Consumption6.9 MediumerlangDebianUnverified Paths can Cause Excessive Use of System Resources5.3 MediumerlangDebianUnverified File Handles can Cause Excessive Use of System Resources5.3 MediumerlangDebianAbsolute path traversal in zip:unzip/1,24.8 MediumerlangDebianErlang/OTP SSH Has Strict KEX Violations3.7 LowerlangDebianErlang/OTP SSH Vulnerable to Pre-Authentication RCE10.0 CriticalerlangDebianKEX init error results with excessive memory usage7.5 HigherlangDebianSSH SFTP packet size not verified properly in Erlang OTP7.0 HigherlangDebianssl fails to validate incorrect extened key usage5.5 MediumerlangDebianPrefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin5.9 MediumerlangDebianIn Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client...9.8 CriticalerlangDebianAn issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts...7.5 HigherlangDebianErlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker...7.5 HigherlangDebianyaws_config.erl in Yaws through 2.0.2 and/or 2.0.7 loads obsolete TLS ciphers, as demonstrated by...5.5 MediumerlangDebianinets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not...6.1 MediumerlangDebianThe Erlang otp TLS server answers with different TLS alerts to different error types in the RSA...5.9 MediumerlangDebianAn issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions...9.8 CriticalerlangDebianErlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections...5.9 MediumerlangDebianMultiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context...7.5 HigherlangDebianThe SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other products, uses nondeterministic...3.4 LowerlangDebianThe SSL protocol, as used in certain configurations in Microsoft Windows and Microsoft Internet...4.3 MediumerlangDebianThe random number generator in the Crypto application before 2.0.2.2, and SSH before 2.0.5, as...7.8 HigherlangDebian** DISPUTED ** lib/crypto/c_src/crypto_drv.c in erlang does not properly check the return value...5.0 Medium