erlang27-ssh vulnerabilities (Red Hat)
28 vulnerabilities.
-
erlang27-sshRed Hat TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries 6.3 Medium -
erlang27-sshRed Hat TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl 8.2 High -
erlang27-sshRed Hat httpd parks a request worker indefinitely on a malformed chunk size sent after the headers 8.7 High -
erlang27-sshRed Hat eldap does not bound the port component of a referral URL before integer conversion 6.3 Medium -
erlang27-sshRed Hat snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields 6.3 Medium -
erlang27-sshRed Hat httpd mod_auth directory protection bypassed by a doubled slash in the request path 8.2 High -
erlang27-sshRed Hat httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems 8.2 High -
erlang27-sshRed Hat A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer 8.2 High -
erlang27-sshRed Hat inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth 6.0 Medium -
erlang27-sshRed Hat inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception 8.7 High -
erlang27-sshRed Hat inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length 8.3 High -
erlang27-sshRed Hat httpd does not enforce the documented default max_clients connection limit 8.7 High -
erlang27-sshRed Hat BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding 8.2 High -
erlang27-sshRed Hat Denial of service via exponential certificate policy tree growth in path validation 8.7 High -
erlang27-sshRed Hat Megaco flex scanner buffer overflow via oversized property parm name 8.3 High -
erlang27-sshRed Hat TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical -
erlang27-sshRed Hat epmd permanent DoS via EMFILE on accept(2) in erts 6.3 Medium -
erlang27-sshRed Hat Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium -
erlang27-sshRed Hat SSH SFTP server denial of service via extended channel data infinite loop 5.3 Medium -
erlang27-sshRed Hat TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 8.2 High -
erlang27-sshRed Hat SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root 2.3 Low -
erlang27-sshRed Hat Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist 7.5 High -
erlang27-sshRed Hat SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 2.3 Low -
erlang27-sshRed Hat ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks 6.3 Medium -
erlang27-sshRed Hat Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash 8.8 High -
erlang27-sshRed Hat nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 7.6 High -
erlang27-sshRed Hat OCSP responder certificate validity period not checked in public_key 6.3 Medium -
erlang27-sshRed Hat Non-CA certificate accepted as intermediate issuer in public_key path validation 7.0 High