erlang vulnerabilities (openSUSE)
43 vulnerabilities.
-
erlangopenSUSE BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding 8.2 High -
erlangopenSUSE Denial of service via exponential certificate policy tree growth in path validation 8.7 High -
erlangopenSUSE Megaco flex scanner buffer overflow via oversized property parm name 8.3 High -
erlangopenSUSE TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication 9.1 Critical -
erlangopenSUSE Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder 5.1 Medium -
erlangopenSUSE Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass 4.8 Medium -
erlangopenSUSE epmd permanent DoS via EMFILE on accept(2) in erts 6.3 Medium -
erlangopenSUSE TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain 8.7 High -
erlangopenSUSE Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl 6.3 Medium -
erlangopenSUSE DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions 8.7 High -
erlangopenSUSE SSH SFTP server denial of service via extended channel data infinite loop 5.3 Medium -
erlangopenSUSE TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension 8.2 High -
erlangopenSUSE DTLS server cookie bypass during startup window due to empty initial cookie secret 6.3 Medium -
erlangopenSUSE SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root 2.3 Low -
erlangopenSUSE httpc leaks Authorization header to cross-origin redirect targets 7.1 High -
erlangopenSUSE Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist 7.5 High -
erlangopenSUSE SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured 2.3 Low -
erlangopenSUSE ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks 6.3 Medium -
erlangopenSUSE Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash 8.8 High -
erlangopenSUSE Stack Buffer Overflow in ei_s_print_term at Very Large Integer 6.9 Medium -
erlangopenSUSE nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification 7.6 High -
erlangopenSUSE OCSP responder certificate validity period not checked in public_key 6.3 Medium -
erlangopenSUSE Non-CA certificate accepted as intermediate issuer in public_key path validation 7.0 High -
erlangopenSUSE SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT 5.3 Medium -
erlangopenSUSE ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch) 8.3 High -
erlangopenSUSE OCSP designated-responder authorization bypass via missing signature verification 7.6 High -
erlangopenSUSE Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver 6.3 Medium -
erlangopenSUSE Request smuggling via first-wins Content-Length parsing in inets httpd 7.0 High -
erlangopenSUSE Pre-auth SSH DoS via unbounded zlib inflate 6.9 Medium -
erlangopenSUSE SFTP root escape via component-agnostic prefix check in ssh_sftpd 5.3 Medium -
erlangopenSUSE TFTP Path Traversal 2.3 Low -
erlangopenSUSE SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles 7.1 High -
erlangopenSUSE Malicious Key Exchange Messages may Lead to Excessive Resource Consumption 6.9 Medium -
erlangopenSUSE Unverified Paths can Cause Excessive Use of System Resources 5.3 Medium -
erlangopenSUSE Unverified File Handles can Cause Excessive Use of System Resources 5.3 Medium -
erlangopenSUSE Absolute path traversal in zip:unzip/1,2 4.8 Medium -
erlangopenSUSE Erlang/OTP SSH Vulnerable to Pre-Authentication RCE 10.0 Critical -
erlangopenSUSE SSH SFTP packet size not verified properly in Erlang OTP 7.0 High -
erlangopenSUSE Prefix Truncation Attack against ChaCha20-Poly1305 and Encrypt-then-MAC aka Terrapin 5.9 Medium -
erlangopenSUSE In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client... 9.8 Critical -
erlangopenSUSE An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts... 7.5 High -
erlangopenSUSE Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allows Directory Traversal. An attacker... 7.5 High -
erlangopenSUSE inets in Erlang possibly 22.1 and earlier follows RFC 3875 section 4.1.18 and therefore does not... 6.1 Medium