DEBIAN-CVE-2024-53846

OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and...

CVE-2024-53846

CVE-2024-53846 affects Erlang/OTP’s ssl validation. Connected advisories show that a regression in the ssl app introduced improper peer verification when incorrect extended key usage is presented, affecting OTP releases: 25.3.2.8 and later up to 25.3.2.16, 26.2 up to 26.2.5.6, and 27.0 up to 27.1...

CVE-2024-53846 ssl fails to validate incorrect extened key usage

OTP is a set of Erlang libraries, which consists of the Erlang runtime system, a number of ready-to-use components mainly written in Erlang, and a set of design principles for Erlang programs. A regression was introduced into the ssl application of OTP starting at OTP-25.3.2.8, OTP-26.2, and...

Erlang/OTP 信任管理问题漏洞

Erlang/OTP is an Erlang/OTP open source library written in JavaScript that handles handling exceptions. The library can catch exceptions raised by the node.js built-in API. A trust management issue vulnerability exists in Erlang/OTP OTP-25.3.2.8 version, OTP-26.2 version, and OTP-27.0 version,...

PT-2024-10115

Name of the Vulnerable Software and Affected Versions Erlang OTP versions 25.3.2.8 through 27.0 Erlang OTP version 26.2 Erlang OTP versions prior to 27.1.3 Description A regression in the ssl application of Erlang OTP causes a server or client to verify the peer even when incorrect extended key...

RHEL 7 : erlang (RHSA-2018:0242)

The remote Redhat Enterprise Linux 7 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2018:0242 advisory. Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault...

erlang-jose (aka JOSE for Erlang and Elixir) through 1.11.6 allow attackers to cause a denial of service (CPU consumption) via a large p2c (aka PBES2 Count) value in a JOSE header.

...

RHSA-2022:8857 Red Hat Security Advisory: Red Hat OpenStack Platform 16.2.4 (erlang) security update

Bulletin has no description...

RHSA-2018:0242 Red Hat Security Advisory: erlang security update

Bulletin has no description...

RHSA-2018:0303 Red Hat Security Advisory: erlang security and bug fix update

Bulletin has no description...

RHSA-2018:0368 Red Hat Security Advisory: erlang security update

Bulletin has no description...

RHSA-2018:0528 Red Hat Security Advisory: erlang security update

Bulletin has no description...

The vulnerability of the Erlang programming language interpreter, related to the exposure of information through discrepancies, allows attackers to gain access to confidential data.

The vulnerability of the Erlang programming language interpreter is related to the exposure of information through incompatibility. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain access to confidential data...

Fedora: Security Advisory (FEDORA-2024-a8d7972ef6)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora: Security Advisory (FEDORA-2024-9484b6915b)

The remote host is missing an update for the SPDX-FileCopyrightText: 2024 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Photon OS 5.0: Erlang PHSA-2024-5.0-0188

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-5.0-0188. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

Photon OS 4.0: Erlang PHSA-2024-4.0-0639

An update of the erlang package has been released. %NASLMINLEVEL 80900 C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2024-4.0-0639. The text itself is copyright C VMware, Inc. include'compat.inc'; if description...

[SECURITY] Fedora 40 Update: erlang-jose-1.11.10-1.fc40

JSON Object Signing and Encryption JOSE for Erlang and Elixir...

[SECURITY] Fedora 39 Update: erlang-jose-1.11.10-1.fc39

JSON Object Signing and Encryption JOSE for Erlang and Elixir...

Fedora 40 : erlang-jose (2024-a8d7972ef6)

The remote Fedora 40 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2024-a8d7972ef6 advisory. Re-reviewed Jose ver. 1.11.10 Tenable has extracted the preceding description block directly from the Fedora security advisory. Note that Nessus has not test...