Lucene search
+L

1 matches found

OSV
OSV
•added 2026/06/10 2:35 p.m.•15 views

EEF-CVE-2026-48860 Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

Summary Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl inettlsdist module allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inettlsdist:checkip/1 function, which enforces a LAN allowlist for Erlang distribution over TLS, calls inet:sockname/1...

7.5CVSS6AI score0.00347EPSS
SaveExploits0References5
Rows per page
Query Builder