EUVD-2015-2864

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Erlang/OTP before 18.0-rc1 is vulnerable to padding-oracle attacks allowing data leakage.

Reporter	Title	Published	Views	Family All 27
CNVD	Erlang OTP Information Disclosure Vulnerability	7 May 201500:00	–	cnvd
CVE	CVE-2015-2774	7 Apr 201621:00	–	cve
Cvelist	CVE-2015-2774	7 Apr 201621:00	–	cvelist
Debian CVE	CVE-2015-2774	7 Apr 201621:00	–	debiancve
Fedora	[SECURITY] Fedora 23 Update: erlang-17.4-5.fc23	1 Sep 201518:41	–	fedora
Fedora	[SECURITY] Fedora 22 Update: erlang-17.4-4.fc22	18 Aug 201505:26	–	fedora
Fedora	[SECURITY] Fedora 21 Update: erlang-17.4-4.fc21	18 Aug 201505:26	–	fedora
Tenable Nessus	Fedora 22 : erlang-17.4-4.fc22 (2015-12923)	18 Aug 201500:00	–	nessus
Tenable Nessus	Fedora 21 : erlang-17.4-4.fc21 (2015-12970)	18 Aug 201500:00	–	nessus
Tenable Nessus	Fedora 23 : erlang (2015-33583e5029)	14 Jul 201600:00	–	nessus

[
  {
    "enisaIdVendor": [
      {
        "id": "cca8ea07-56a7-368e-ab0d-a16fbea9590d",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a89283f4-a079-37f8-9cca-7dcf8550746f",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
suse	www.suse.com/security/cve/CVE-2015-2774.html
ubuntu	www.ubuntu.com/security/CVE-2015-2774
advisories	www.advisories.mageia.org/CVE-2015-2774.html
usn	www.usn.ubuntu.com/3571-1/
web	www.web.archive.org/web/20150905124006/http://www.erlang.org/news/85
imperialviolet	www.imperialviolet.org/2014/12/08/poodleagain.html
securityfocus	www.securityfocus.com/bid/73398
lists	www.lists.opensuse.org/opensuse-updates/2016-02/msg00124.html
openwall	www.openwall.com/lists/oss-security/2015/03/27/9
oracle	www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html

07 Oct 2025 00:30Current

6Medium risk

Vulners AI Score6

CVSS 35.9

CVSS 24.3

EPSS0.00529