erlang27-erl_interface vulnerabilities (Red Hat)
28 vulnerabilities.
-
erlang27-erl_interfaceRed Hat TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries 6.3 Medium -
erlang27-erl_interfaceRed Hat TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl 8.2 High -
erlang27-erl_interfaceRed Hat httpd parks a request worker indefinitely on a malformed chunk size sent after the headers 8.7 High -
erlang27-erl_interfaceRed Hat eldap does not bound the port component of a referral URL before integer conversion 6.3 Medium -
erlang27-erl_interfaceRed Hat snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields 6.3 Medium -
erlang27-erl_interfaceRed Hat httpd mod_auth directory protection bypassed by a doubled slash in the request path 8.2 High -
erlang27-erl_interfaceRed Hat httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems 8.2 High -
erlang27-erl_interfaceRed Hat A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer 8.2 High -
erlang27-erl_interfaceRed Hat inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth 6.0 Medium -
erlang27-erl_interfaceRed Hat inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception 8.7 High -
erlang27-erl_interfaceRed Hat inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length 8.3 High -
erlang27-erl_interfaceRed Hat httpd does not enforce the documented default max_clients connection limit 8.7 High -
erlang27-erl_interfaceRed Hat BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding 8.2 High -
erlang27-erl_interfaceRed Hat Denial of service via exponential certificate policy tree growth in path validation 8.7 High -
erlang27-erl_interfaceRed Hat Megaco flex scanner buffer overflow via oversized property parm name 8.3 High -
erlang27-erl_interfaceRed Hat TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical -
erlang27-erl_interfaceRed Hat epmd permanent DoS via EMFILE on accept(2) in erts 6.3 Medium -
erlang27-erl_interfaceRed Hat Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium -
erlang27-erl_interfaceRed Hat SSH SFTP server denial of service via extended channel data infinite loop 5.3 Medium -
erlang27-erl_interfaceRed Hat TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 8.2 High -
erlang27-erl_interfaceRed Hat SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root 2.3 Low -
erlang27-erl_interfaceRed Hat Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist 7.5 High -
erlang27-erl_interfaceRed Hat SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 2.3 Low -
erlang27-erl_interfaceRed Hat ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks 6.3 Medium -
erlang27-erl_interfaceRed Hat Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash 8.8 High -
erlang27-erl_interfaceRed Hat nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 7.6 High -
erlang27-erl_interfaceRed Hat OCSP responder certificate validity period not checked in public_key 6.3 Medium -
erlang27-erl_interfaceRed Hat Non-CA certificate accepted as intermediate issuer in public_key path validation 7.0 High