Lucene search
Alpine Linux Development TeamALPINE:CVE-2022-37026HistorySep 21, 2022 - 2:15 p.m.
CVE-2022-37026
2022-09-2114:15:11
Alpine Linux Development Team
security.alpinelinux.org
22
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Alpine | edge-community | noarch | erlang | < 25.0.3-r0 | UNKNOWN |
| Alpine | 3.16-community | noarch | erlang | < 24.3.4.6-r0 | UNKNOWN |
| Alpine | 3.17-community | noarch | erlang | < 25.0.3-r0 | UNKNOWN |
| Alpine | 3.18-community | noarch | erlang | < 25.0.3-r0 | UNKNOWN |
| Alpine | 3.19-community | noarch | erlang | < 25.0.3-r0 | UNKNOWN |
| Alpine | 3.20-community | noarch | erlang | < 25.0.3-r0 | UNKNOWN |
Related
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Erlang vulnerability (USN-6059-1)
2023-05-08 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.2.4 (erlang) (RHSA-2022:8857)
2023-01-23 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : erlang (SUSE-SU-2023:3401-1)
2023-08-24 00:00:00
openvas
openvas
openSUSE: Security Advisory for erlang (SUSE-SU-2023:3401-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2022-0450)
2022-12-07 00:00:00
Debian: Security Advisory (DLA-3491-1)
2023-07-12 00:00:00
osv
osv
erlang - security update
2023-07-11 00:00:00
erlang vulnerability
2023-05-08 08:40:04
CVE-2022-37026
2022-09-21 14:15:11
mageia
mageia
Updated erlang packages fix security vulnerability
2022-12-07 02:32:48
ubuntu
ubuntu
Erlang vulnerability
2023-05-08 00:00:00
redhat
redhat
redhatcve
redhatcve
CVE-2022-37026
2022-11-10 19:25:58
ubuntucve
ubuntucve
CVE-2022-37026
2022-09-21 00:00:00
debian
debian
[SECURITY] [DLA 3491-1] erlang security update
2023-07-11 13:23:21
nvd
nvd
CVE-2022-37026
2022-09-21 14:15:11
veracode
veracode
Authentication Bypass
2022-10-16 23:29:36
debiancve
debiancve
CVE-2022-37026
2022-09-21 14:15:11
cvelist
cvelist
CVE-2022-37026
2022-09-21 00:00:00
redos
redos
ROS-20240606-04
2024-06-06 00:00:00
cve
cve
CVE-2022-37026
2022-09-21 14:15:11
prion
prion
Authentication flaw
2022-09-21 14:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.5 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
64.9%
Related for ALPINE:CVE-2022-37026