Lucene search
GoogleOSV:USN-6059-1HistoryMay 08, 2023 - 8:40 a.m.
erlang vulnerability
2023-05-0808:40:04
Google
osv.dev
7
erlang
vulnerability
tls
client authentication
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
64.8%
It was discovered that Erlang did not properly implement TLS client
certificate validation during the TLS handshake. A remote attacker could
use this issue to bypass client authentication.
Related
nessus
nessus
RHEL 8 : Red Hat OpenStack Platform 16.2.4 (erlang) (RHSA-2022:8857)
2023-01-23 00:00:00
Ubuntu 20.04 LTS / 22.04 LTS : Erlang vulnerability (USN-6059-1)
2023-05-08 00:00:00
SUSE SLES15 Security Update : erlang (SUSE-SU-2022:4222-1)
2022-11-26 00:00:00
openvas
openvas
openSUSE: Security Advisory for erlang (SUSE-SU-2023:3401-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3409-1)
2023-08-24 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:4109-1)
2023-10-19 00:00:00
debiancve
debiancve
CVE-2022-37026
2022-09-21 14:15:11
osv
osv
CVE-2022-37026
2022-09-21 14:15:11
erlang - security update
2023-07-11 00:00:00
erlang-25.1.1-1.1 on GA media
2024-06-15 00:00:00
prion
prion
Authentication flaw
2022-09-21 14:15:00
redos
redos
ROS-20240606-04
2024-06-06 00:00:00
cve
cve
CVE-2022-37026
2022-09-21 14:15:11
cvelist
cvelist
CVE-2022-37026
2022-09-21 00:00:00
ubuntucve
ubuntucve
CVE-2022-37026
2022-09-21 00:00:00
debian
debian
[SECURITY] [DLA 3491-1] erlang security update
2023-07-11 13:23:21
veracode
veracode
Authentication Bypass
2022-10-16 23:29:36
nvd
nvd
CVE-2022-37026
2022-09-21 14:15:11
mageia
mageia
Updated erlang packages fix security vulnerability
2022-12-07 02:32:48
alpinelinux
alpinelinux
CVE-2022-37026
2022-09-21 14:15:11
ubuntu
ubuntu
Erlang vulnerability
2023-05-08 00:00:00
redhatcve
redhatcve
CVE-2022-37026
2022-11-10 19:25:58
redhat
redhat
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
AI Score
6.8
Confidence
Low
EPSS
0.002
Percentile
64.8%
Related for OSV:USN-6059-1