erlang vulnerabilities (openEuler)
51 vulnerabilities.
-
erlangopenEuler Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder 8.2 High -
erlangopenEuler SSH daemon allocates unbounded idle session channels, bypassing max_channels 7.1 High -
erlangopenEuler TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension 9.3 Critical -
erlangopenEuler httpd parks a request worker indefinitely on a malformed chunk size sent after the headers 8.7 High -
erlangopenEuler eldap does not bound the port component of a referral URL before integer conversion 6.3 Medium -
erlangopenEuler snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields 6.3 Medium -
erlangopenEuler httpd mod_auth directory protection bypassed by a doubled slash in the request path 8.2 High -
erlangopenEuler httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems 8.2 High -
erlangopenEuler A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer 8.2 High -
erlangopenEuler inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth 6.0 Medium -
erlangopenEuler inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception 8.7 High -
erlangopenEuler inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i 8.3 High -
erlangopenEuler inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation 8.3 High -
erlangopenEuler uri_string does not bound the port component of a URI before integer conversion 6.9 Medium -
erlangopenEuler httpc memory exhaustion via unbounded response header accumulation 8.2 High -
erlangopenEuler httpd applies no timeout while receiving a request body, parking a worker on a stalled client 8.7 High -
erlangopenEuler httpc does not bound server-supplied numeric header values before integer conversion 6.3 Medium -
erlangopenEuler httpd does not enforce the documented default max_clients connection limit 8.7 High -
erlangopenEuler Megaco flex scanner buffer overflow via oversized property parm name 8.3 High -
erlangopenEuler TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical -
erlangopenEuler Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder 5.1 Medium -
erlangopenEuler epmd permanent DoS via EMFILE on accept(2) in erts 6.3 Medium -
erlangopenEuler TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain 8.7 High -
erlangopenEuler Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium -
erlangopenEuler DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions 8.7 High -
erlangopenEuler SSH SFTP server denial of service via extended channel data infinite loop 5.3 Medium -
erlangopenEuler TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 8.2 High -
erlangopenEuler DTLS server cookie bypass during startup window due to empty initial cookie secret 6.3 Medium -
erlangopenEuler SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root 2.3 Low -
erlangopenEuler httpc leaks Authorization header to cross-origin redirect targets 7.1 High -
erlangopenEuler SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 2.3 Low -
erlangopenEuler ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks 6.3 Medium -
erlangopenEuler Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash 8.8 High -
erlangopenEuler Stack Buffer Overflow in ei_s_print_term at Very Large Integer 6.9 Medium -
erlangopenEuler SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT 5.3 Medium -
erlangopenEuler ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) 8.3 High -
erlangopenEuler Request smuggling via first-wins Content-Length parsing in inets httpd 7.0 High -
erlangopenEuler Pre-auth SSH DoS via unbounded zlib inflate 6.9 Medium -
erlangopenEuler SFTP root escape via component-agnostic prefix check in ssh_sftpd 5.3 Medium -
erlangopenEuler TFTP Path Traversal 2.3 Low -
erlangopenEuler SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles 7.1 High -
erlangopenEuler Malicious Key Exchange Messages may Lead to Excessive Resource Consumption 6.9 Medium -
erlangopenEuler Unverified Paths can Cause Excessive Use of System Resources 5.3 Medium -
erlangopenEuler Unverified File Handles can Cause Excessive Use of System Resources 5.3 Medium -
erlangopenEuler Absolute path traversal in zip:unzip/1,2 4.8 Medium -
erlangopenEuler Erlang/OTP SSH Has Strict KEX Violations 3.7 Low -
erlangopenEuler Erlang/OTP SSH Vulnerable to Pre-Authentication RCE 10.0 Critical -
erlangopenEuler KEX init error results with excessive memory usage 7.5 High -
erlangopenEuler SSH SFTP packet size not verified properly in Erlang OTP 7.0 High -
erlangopenEuler Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium - Show olderLoading…