Linux Distros Unpatched Vulnerability : CVE-2026-65634
| Reporter | Title | Published | Views | Family All 16 |
|---|---|---|---|---|
| Erlang/OTP -- multiple vulnerabilities in ssl, ssh and asn1 | 22 Sep 202600:00 | – | freebsd | |
| CVE-2026-65634 | 22 Sep 202620:15 | – | circl | |
| CVE-2026-65634 | 22 Sep 202608:49 | – | cve | |
| CVE-2026-65634 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder | 22 Sep 202608:49 | – | cvelist | |
| CVE-2026-65634 | 22 Sep 202608:49 | – | debiancve | |
| EUVD-2026-84340 | 22 Sep 202608:49 | – | euvd | |
| Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder | 24 Sep 202608:44 | – | mscve | |
| CVE-2026-65634 | 22 Sep 202609:17 | – | nvd | |
| AZL-103422 CVE-2026-65634 affecting package erlang 26.2.5.21-6 | 22 Sep 202609:17 | – | osv | |
| CVE-2026-65634 Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder | 22 Sep 202608:49 | – | osv |
10
| Source | Link |
|---|---|
| security-tracker | www.security-tracker.debian.org/tracker/CVE-2026-65634 |
| ubuntu | www.ubuntu.com/security/CVE-2026-65634 |
| cve | www.cve.mitre.org/cgi-bin/cvename.cgi |
#%NASL_MIN_LEVEL 80900
##
# (C) Tenable, Inc.
##
include('compat.inc');
if (description)
{
script_id(349149);
script_version("1.2");
script_set_attribute(attribute:"plugin_modification_date", value:"2026/09/23");
script_cve_id("CVE-2026-65634");
script_name(english:"Linux Distros Unpatched Vulnerability : CVE-2026-65634");
script_set_attribute(attribute:"synopsis", value:
"The Linux/Unix host has one or more packages installed with a vulnerability that the vendor indicates will not be
patched.");
script_set_attribute(attribute:"description", value:
"The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied
patch available.
- Inefficient algorithmic complexity in the Erlang/OTP asn1 OBJECT IDENTIFIER decoder allows a remote
unauthenticated attacker to cause denial of service by sending a crafted OID during the TLS handshake. The
BER OID decoder asn1rtt_ber:dec_subidentifiers/3 in lib/asn1/src/asn1rtt_ber.erl and the equivalent PER
helper asn1rtt_per_common:dec_subidentifiers/3 in lib/asn1/src/asn1rtt_per_common.erl accumulate a
base-128 subidentifier into an unbounded integer using (Av bsl 7) + H per continuation byte. Each shift
and addition on the growing accumulator is linear in the number of bits already accumulated, giving
quadratic total work in the size of a single subidentifier. The JER helper asn1rtt_jer:json2oid/1 in
lib/asn1/src/asn1rtt_jer.erl exhibits the same class of unbounded-integer parsing when decoding a dot-
separated OID from JSON. A DER-encoded OBJECT IDENTIFIER with one very large arc (approximately 262 KB of
continuation bytes) consumes roughly 13 seconds of CPU on typical hardware. The vulnerable decoder is
generated into every ASN.1 module that contains an OBJECT IDENTIFIER, including OTP-PUB-KEY which is
reached during X.509 certificate parsing via public_key:pkix_decode_cert/2. This decoder runs before any
signature or trust chain verification, so any Erlang service that parses peer TLS certificates is exposed:
the default for TLS clients (which always parse the server certificate) and for mutual-TLS servers (which
parse client certificates). This vulnerability is associated with program files
lib/asn1/src/asn1rtt_ber.erl, lib/asn1/src/asn1rtt_per_common.erl and lib/asn1/src/asn1rtt_jer.erl and
program routines asn1rtt_ber:dec_subidentifiers/3, asn1rtt_per_common:dec_subidentifiers/3 and
asn1rtt_jer:json2oid/1. This issue affects OTP from OTP 17.0 before OTP 27.3.4.18, OTP 28.5.0.7, and OTP
29.1.1, corresponding to asn1 from 3.0 before 5.3.4.3, 5.4.3.1, and 5.5.2. Whether OTP before OTP 17.0,
corresponding to asn1 before 3.0, is affected is unknown. (CVE-2026-65634)
Note that Nessus relies on the presence of the package as reported by the vendor.");
script_set_attribute(attribute:"see_also", value:"https://security-tracker.debian.org/tracker/CVE-2026-65634");
script_set_attribute(attribute:"see_also", value:"https://ubuntu.com/security/CVE-2026-65634");
script_set_attribute(attribute:"solution", value:
"There is no known solution at this time.");
script_set_attribute(attribute:"agent", value:"unix");
script_set_cvss_base_vector("CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P");
script_set_cvss_temporal_vector("CVSS2#E:U/RL:U/RC:C");
script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H");
script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:U/RC:C");
script_set_attribute(attribute:"cvss4_vector", value:"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N");
script_set_attribute(attribute:"cvss4_threat_vector", value:"CVSS:4.0/E:U");
script_set_attribute(attribute:"cvss_score_source", value:"CVE-2026-65634");
script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
script_set_attribute(attribute:"exploit_available", value:"false");
script_set_attribute(attribute:"vendor_unpatched", value:"true");
script_set_attribute(attribute:"vuln_publication_date", value:"2026/09/22");
script_set_attribute(attribute:"plugin_publication_date", value:"2026/09/23");
script_set_attribute(attribute:"plugin_type", value:"local");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:20.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:22.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:24.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:26.04:-:lts");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:12.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:13.0");
script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:14.0");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:erlang");
script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:erlang");
script_set_attribute(attribute:"generated_plugin", value:"current");
script_end_attributes();
script_category(ACT_GATHER_INFO);
script_family(english:"Misc.");
script_copyright(english:"This script is Copyright (C) 2026 and is owned by Tenable, Inc. or an Affiliate thereof.");
script_dependencies("ssh_get_info2.nasl", "set_linux_os_id.nasl");
script_require_keys("Host/cpu", "Host/local_checks_enabled", "global_settings/vendor_unpatched", "Host/OS/identifier");
script_require_ports("Host/OS/Debian Linux-12", "Host/OS/Debian Linux-13", "Host/OS/Debian Linux-14", "Host/OS/Ubuntu Linux-14.04", "Host/OS/Ubuntu Linux-16.04", "Host/OS/Ubuntu Linux-18.04", "Host/OS/Ubuntu Linux-20.04", "Host/OS/Ubuntu Linux-22.04", "Host/OS/Ubuntu Linux-24.04", "Host/OS/Ubuntu Linux-26.04");
exit(0);
}
if (!get_kb_item("global_settings/vendor_unpatched")) exit(0, "Unpatched Vulnerabilities Detection not active.");
if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (empty_or_null(get_one_kb_item("Host/Debian/dpkg-l"))) audit(AUDIT_PACKAGE_LIST_MISSING);
include('linux_unpatched.inc');
var distro_constraints_array = {
"Debian Linux-12": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "12",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-22.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "22.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-24.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "24.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-13": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "13",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Debian Linux-14": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-26.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "26.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-14.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "14.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-appmon"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-pman"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-toolbar"},
{"reference": "erlang-tools"},
{"reference": "erlang-tv"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-16.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "16.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-dbg"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-gs"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-percept"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-test-server"},
{"reference": "erlang-tools"},
{"reference": "erlang-typer"},
{"reference": "erlang-webtool"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-18.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "18.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-corba"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ic"},
{"reference": "erlang-ic-java"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
},
"Ubuntu Linux-20.04": {
"package_manager": "dpkg-l",
"constraints": [
{
"release": "20.04",
"pkgs": [
{"reference": "erlang"},
{"reference": "erlang-asn1"},
{"reference": "erlang-base"},
{"reference": "erlang-base-hipe"},
{"reference": "erlang-common-test"},
{"reference": "erlang-crypto"},
{"reference": "erlang-debugger"},
{"reference": "erlang-dev"},
{"reference": "erlang-dialyzer"},
{"reference": "erlang-diameter"},
{"reference": "erlang-doc"},
{"reference": "erlang-edoc"},
{"reference": "erlang-eldap"},
{"reference": "erlang-erl-docgen"},
{"reference": "erlang-et"},
{"reference": "erlang-eunit"},
{"reference": "erlang-examples"},
{"reference": "erlang-ftp"},
{"reference": "erlang-inets"},
{"reference": "erlang-jinterface"},
{"reference": "erlang-manpages"},
{"reference": "erlang-megaco"},
{"reference": "erlang-mnesia"},
{"reference": "erlang-mode"},
{"reference": "erlang-nox"},
{"reference": "erlang-observer"},
{"reference": "erlang-odbc"},
{"reference": "erlang-os-mon"},
{"reference": "erlang-parsetools"},
{"reference": "erlang-public-key"},
{"reference": "erlang-reltool"},
{"reference": "erlang-runtime-tools"},
{"reference": "erlang-snmp"},
{"reference": "erlang-src"},
{"reference": "erlang-ssh"},
{"reference": "erlang-ssl"},
{"reference": "erlang-syntax-tools"},
{"reference": "erlang-tftp"},
{"reference": "erlang-tools"},
{"reference": "erlang-wx"},
{"reference": "erlang-x11"},
{"reference": "erlang-xmerl"}
]
}
]
}
};
var distro_constraints_values = linux_unpatched::get_distro_constraints(distro_constraints_arr:distro_constraints_array);
if (empty_or_null(distro_constraints_values)) audit(AUDIT_HOST_NOT, 'affected');
var third_party_support = get_kb_item('Host/OS/extended-third-party');
if (!empty_or_null(third_party_support)) {
var third_party_vendors = distro_constraints_values['third_party'];
if (!empty_or_null(third_party_vendors)) {
var vendor;
foreach vendor (third_party_vendors) {
if (vendor == third_party_support) exit(0, 'A third party management patch is available for this vulnerability from ' + vendor + '.\n');
}
}
}
var report = linux_unpatched::check_unpatched_constraints(distro_constraints_values:distro_constraints_values);
if (!empty_or_null(report))
{
security_report_v4(
port : 0,
severity : SECURITY_WARNING,
extra : report
);
exit(0);
}
else
{
audit(AUDIT_HOST_NOT, 'affected');
}
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
23 Sep 2026 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 48.2
EPSS0.00418
SSVC