Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 : Erlang vulnerability (USN-7443-1)

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 24.10 host has packages installed that are affected by a vulnerability as referenced in the USN-7443-1 advisory. Fabian Bumer, Marcel Maehren, Marcus Brinkmann, and Jrg Schwenk discovered that Erlang OTPs SSH module incorrect handled...

DLA-4132-1 erlang - security update

Bulletin has no description...

Debian dla-4132 : erlang - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-4132 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4132-1 [email protected]...

Debian dsa-5906 : erlang - security update

The remote Debian 12 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5906 advisory. - ------------------------------------------------------------------------- Debian Security Advisory DSA-5906-1 [email protected] https://www.debian.org/securit...

[SECURITY] [DLA 4132-1] erlang security update

------------------------------------------------------------------------- Debian LTS Advisory DLA-4132-1 [email protected] https://www.debian.org/lts/security/ Bastien Roucariès April 21, 2025 https://wiki.debian.org/LTS -...

[SECURITY] [DSA 5906-1] erlang security update

------------------------------------------------------------------------- Debian Security Advisory DSA-5906-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff April 20, 2025 https://www.debian.org/security/faq -...

DSA-5906-1 erlang - security update

Bulletin has no description...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

Build bash » git clone https://github.com/0xPThree/cve-202...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433-Erlang-OTP-SSH-RCE-PoC The vulnerability allows...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

Vulnerable Application Erlang/OTP is a set of libraries for...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

CVE-2025-32433 A critical vulnerability in Erlang/OTP SSH serv...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

Security research on Erlang/OTP SSH CVE-2025-32433 Python exp...

Vulnerability fixed in Erlang/OTP SSH server

Erlang/OTP developers have fixed a vulnerability in Erlang OTP. The vulnerability is located in the SSH functionality of affected versions of Erlang/OTP. The vulnerability allows an unauthenticated remote malicious person to execute arbitrary code in context of the SSH deamon by sending prepared...

Exploit for Missing Authentication for Critical Function in Erlang Erlang\/Otp

Working PoC for CVE-2025-32433 !ca...

Erlang/OTP SSH Application Detection

Binary data erlangotpsshdetect.nbin...

The vulnerability of the SSH protocol implementation in the Erlang/OTP library lies in the lack of authentication checks for a critical function, allowing attackers to execute arbitrary code.

The vulnerability of the SSH protocol implementation in the Erlang/OTP library set is related to the lack of authentication checks for a critical function. Exploiting this vulnerability allows an attacker operating remotely to execute arbitrary code by sending specially crafted SSH packets...

Ubuntu: Security Advisory (USN-7443-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Erlang/OTP SSH RCE (OTP-19595)

The Erlang/OTP SSH applicaiton installed on the remote host is 4.15.x 4.15.3.12, 5.1.x 5.1.4.8, 5.2.x 5.2.10. Therefore, it is affected by a remote code execution vulnerability due to a flaw in the SSH protocol message handling. An unauthenticated, remote attacker can exploit this to bypass...

Important Photon OS Security Update - PHSA-2025-5.0-0505

Updates of 'erlang' packages of Photon OS have been released...

Researchers Find CVSS 10.0 Severity RCE Vulnerability in Erlang/OTP SSH

Security researchers report CVE-2025-32433, a CVSS 10.0 RCE vulnerability in Erlang/OTP SSH, allowing unauthenticated code execution on exposed…...