CVE-2017-1000385: Observable Discrepancy

The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS 1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key this is a variation of the Bleichenbacher attack...

PT-2017-4334

Name of the Vulnerable Software and Affected Versions: Erlang affected versions not specified Description: The issue is related to the disclosure of information through inconsistency in the Erlang language interpreter. It may allow a remote attacker to gain access to confidential data...