Important Photon OS Security Update - PHSA-2021-0414

Updates of 'docker', 'erlang', 'rpm', 'tcl' packages of Photon OS have been released...

Advisory ROSA-SA-2021-1829

Software: erlang R16B OS: Cobalt 7.9 CVE-ID: CVE-2011-0766 CVE-Crit: MEDIUM CVE-DESC: The random number generator in the Crypto application before 2.0.2.2.2 and SSH before 2.0.5, which was used in the Erlang / OTP ssh library before R14B03, uses predictable starting numbers based on the current...

Photon OS 3.0: Erlang PHSA-2021-3.0-0235

An update of the erlang package has been released. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0235. The text itself is copyright C VMware, Inc...

Important Photon OS Security Update - PHSA-2021-0235

Updates of 'erlang' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-3.0-0235

Updates of 'erlang' packages of Photon OS have been released...

Important Photon OS Security Update - PHSA-2021-0343

Updates of 'mysql', 'erlang' packages of Photon OS have been released...

CVE-2021-29221

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

CVE-2021-29221

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

Privilege escalation

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

CVE-2021-29221

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

CVE-2021-29221

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

CVE-2021-29221

CVE-2021-29221 concerns Erlang/OTP on Windows prior to 23.2.3. A local privilege escalation is possible by adding files to the installation directory under unsafe filesystem permissions, potentially hijacking other users’ Erlang processes or coercing the erlsrv.exe service to execute arbitrary co...

CVE-2021-29221

A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of other users running Erlang programs or possibly coerce a service running with "erlsrv.exe" to execute...

Erlang/OTP 代码问题漏洞

erlang/otp is a personal developer of a library written in JavaScript to handle handling exceptions. The library catches exceptions raised by the node.js built-in API. A security vulnerability exists in Erlang/OTP version 23.2.3 and earlier versions, which can be exploited to hijack the account o...

[SECURITY] Fedora 33 Update: erlang-23.2.3-1.fc33

Erlang is a general-purpose programming language and runtime environment. Erlang has built-in support for concurrency, distribution and fault tolerance. Erlang is used in several large telecommunication systems from Ericsson...

Fedora: Security Advisory for erlang (FEDORA-2021-06cbd73fba)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

Fedora 33 : erlang (2021-06cbd73fba)

The remote Fedora 33 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2021-06cbd73fba advisory. - An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root...

Man-in-the-Middle (MitM)

erlang is vulnerable to man-in-the-middle attack. The SSL application accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority, potentially allowing for man-in-the-middle attacks...

CVE-2020-35733

A flaw was found in the OTP component of Erlang. The SSL application accepts and trusts invalid X.509 certificate chains. An attacker, able to create a fake certificate chain, could create a man-in-the-middle attack. The highest threat from this vulnerability is to data confidentiality. Mitigatio...

[ASA-202101-39] erlang: certificate verification bypass

Arch Linux Security Advisory ASA-202101-39 ========================================== Severity: High Date : 2021-01-20 CVE-ID : CVE-2020-35733 Package : erlang Type : certificate verification bypass Remote : Yes Link : https://security.archlinux.org/AVG-1457 Summary ======= The package erlang...