erlang vulnerabilities (Mageia)
13 vulnerabilities.
-
erlangMageia TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical -
erlangMageia Email-derived URL path injection in the Swoosh Microsoft Graph adapter 2.1 Low -
erlangMageia Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium -
erlangMageia SSH SFTP server denial of service via extended channel data infinite loop 5.3 Medium -
erlangMageia TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 8.2 High -
erlangMageia Plug: quadratic-time decoding of nested query/body parameters enables denial of service 8.7 High -
erlangMageia SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 2.3 Low -
erlangMageia SSH SFTP packet size not verified properly in Erlang OTP 7.0 High -
erlangMageia Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
erlangMageia In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client... 9.8 Critical -
erlangMageia The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA... 5.9 Medium -
erlangMageia Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections... 5.9 Medium -
erlangMageia Multiple CRLF injection vulnerabilities in the FTP module in Erlang/OTP R15B03 allow context... 7.5 High