Lucene search
Gentoo FoundationMGASA-2022-0450HistoryDec 07, 2022 - 2:32 a.m.
Updated erlang packages fix security vulnerability
2022-12-0702:32:48
Gentoo Foundation
advisories.mageia.org
43
erlang
packages
fix
security
ssl
tls
dtls
client authentication
bypass
unix
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
64.9%
In Erlang/OTP before 23.3.4.15, 24.x before 24.3.4.2, and 25.x before 25.0.2, there is a Client Authentication Bypass in certain client-certification situations for SSL, TLS, and DTLS. (CVE-2022-37026)
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Mageia | 8 | noarch | erlang | < 23.2.1-3.2 | erlang-23.2.1-3.2.mga8 |
Related
nessus
nessus
Ubuntu 20.04 LTS / 22.04 LTS : Erlang vulnerability (USN-6059-1)
2023-05-08 00:00:00
RHEL 8 : Red Hat OpenStack Platform 16.2.4 (erlang) (RHSA-2022:8857)
2023-01-23 00:00:00
SUSE SLES15 / openSUSE 15 Security Update : erlang (SUSE-SU-2023:3401-1)
2023-08-24 00:00:00
openvas
openvas
openSUSE: Security Advisory for erlang (SUSE-SU-2023:3401-1)
2024-03-04 00:00:00
Mageia: Security Advisory (MGASA-2022-0450)
2022-12-07 00:00:00
Debian: Security Advisory (DLA-3491-1)
2023-07-12 00:00:00
alpinelinux
alpinelinux
CVE-2022-37026
2022-09-21 14:15:11
osv
osv
erlang - security update
2023-07-11 00:00:00
erlang vulnerability
2023-05-08 08:40:04
CVE-2022-37026
2022-09-21 14:15:11
ubuntu
ubuntu
Erlang vulnerability
2023-05-08 00:00:00
redhat
redhat
redhatcve
redhatcve
CVE-2022-37026
2022-11-10 19:25:58
ubuntucve
ubuntucve
CVE-2022-37026
2022-09-21 00:00:00
debian
debian
[SECURITY] [DLA 3491-1] erlang security update
2023-07-11 13:23:21
nvd
nvd
CVE-2022-37026
2022-09-21 14:15:11
veracode
veracode
Authentication Bypass
2022-10-16 23:29:36
debiancve
debiancve
CVE-2022-37026
2022-09-21 14:15:11
cvelist
cvelist
CVE-2022-37026
2022-09-21 00:00:00
redos
redos
ROS-20240606-04
2024-06-06 00:00:00
cve
cve
CVE-2022-37026
2022-09-21 14:15:11
prion
prion
Authentication flaw
2022-09-21 14:15:00
9.8 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
0.002 Low
EPSS
Percentile
64.9%
Related for MGASA-2022-0450