Lucene search
+L

19079 matches found

osv_ubuntu
osv_ubuntu
•added 2025/09/11 9:15 a.m.•34 views

UBUNTU-CVE-2025-48038

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS5.8AI score0.00394EPSS
SaveExploits0References5
osv_ubuntu
osv_ubuntu
•added 2025/09/11 9:15 a.m.•34 views

UBUNTU-CVE-2025-48040

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15,...

6.9CVSS6AI score0.00431EPSS
SaveExploits0References5
Mend
Mend
•added 2025/09/11 8:14 a.m.•5 views

CVE-2025-48041

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and...

7.1CVSS0.00394EPSS
SaveExploits0References8
attackerkb
attackerkb
•added 2025/09/11 8:14 a.m.•17 views

CVE-2025-48041

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and...

7.1CVSS5.8AI score0.00394EPSS
SaveExploits0References8Affected Software1
osv_cve
osv_cve
•added 2025/09/11 8:14 a.m.•22 views

CVE-2025-48041 SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and...

7.1CVSS5.8AI score0.00394EPSS
SaveExploits0References11
osv_eef
osv_eef
•added 2025/09/11 8:14 a.m.•19 views

EEF-CVE-2025-48041 SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

Summary Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh ssh\sftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh\sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3...

7.1CVSS5.7AI score0.00394EPSS
SaveExploits0References6
CVE
CVE
•added 2025/09/11 8:14 a.m.•80 views

CVE-2025-48041

CVE-2025-48041 is an Erlang/OTP issue in the SSH sftp path (ssh_sftpd.erl) causing Allocation of Resources Without Limits or Throttling. Affected are OTP forms up to 28.0.3 (and related SSH from 3.0.1 to 5.3.3, 5.2.11.3, 5.1.4.12). The vulnerability enables excessive resource allocation and relat...

7.1CVSS5.8AI score0.00394EPSS
SaveExploits0References7
CVE
CVE
•added 2025/09/11 8:14 a.m.•68 views

CVE-2025-48040

CVE-2025-48040 describes an uncontrolled resource consumption in Erlang OTP ssh (ssh_sftp) due to excessive data handling. Affected ranges include OTP 17.0–28.0.3, OTP 27.3.4.3 and 26.2.5.15 (ssh from 3.0.1–5.3.3, 5.2.11.3, 5.1.4.12). Exploitation details are not provided in the available documen...

6.9CVSS6AI score0.00431EPSS
SaveExploits0References7
Mend
Mend
•added 2025/09/11 8:14 a.m.•9 views

CVE-2025-48040

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15,...

6.9CVSS0.00431EPSS
SaveExploits0References8
Mend
Mend
•added 2025/09/11 8:13 a.m.•3 views

CVE-2025-48039

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS0.00394EPSS
SaveExploits0References8
osv_cve
osv_cve
•added 2025/09/11 8:13 a.m.•12 views

CVE-2025-48039 Unverified Paths can Cause Excessive Use of System Resources

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS5.8AI score0.00394EPSS
SaveExploits0References11
Cvelist
Cvelist
•added 2025/09/11 8:13 a.m.•43 views

CVE-2025-48039 Unverified Paths can Cause Excessive Use of System Resources

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS0.00394EPSS
SaveExploits0References7
Mend
Mend
•added 2025/09/11 8:13 a.m.•6 views

CVE-2025-48038

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS0.00394EPSS
SaveExploits0References8
Cvelist
Cvelist
•added 2025/09/11 8:13 a.m.•40 views

CVE-2025-48038 Unverified File Handles can Cause Excessive Use of System Resources

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS0.00394EPSS
SaveExploits0References7
OSSF Malicious Packages
OSSF Malicious Packages
•added 2025/09/11 6:02 a.m.•13 views

Malicious code in secured-ssh (npm)

The package secured-ssh was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2646cfd359028f95d25b02993d148c26f9a4f910b6ee2b382f6e5a38e30ca9a0 Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Snyk
Snyk
•added 2025/09/11 6:02 a.m.•16 views

Malicious Package

Overview secured-ssh is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this package authorshi...

9.8CVSS6.8AI score
SaveExploits0References2
osv_mal
osv_mal
•added 2025/09/11 6:02 a.m.•12 views

MAL-2025-47085 Malicious code in secured-ssh (npm)

The package secured-ssh was found to contain malicious code. --- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2646cfd359028f95d25b02993d148c26f9a4f910b6ee2b382f6e5a38e30ca9a0 Any computer that has this package installed or running should be considered fully...

6.9AI score
SaveExploits0References1
Github Security Blog
Github Security Blog
•added 2025/09/11 6:02 a.m.•6 views

Malware in secured-ssh

Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be rotated immediately from a different computer. The package should be removed, but as full control of the computer may have been given to an outsid...

5.8AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/11 12:00 a.m.•3 views

CVE-2025-48039: Allocation of Resources Without Limits or Throttling

Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3,...

5.3CVSS5.8AI score0.00394EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/09/11 12:00 a.m.•4 views

CVE-2025-48040: Uncontrolled Resource Consumption

Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh sshsftp modules allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/sshsftpd.erl. This issue affects OTP from OTP 17.0 before OTP 28.0.3, OTP 27.3.4.3 and OTP 26.2.5.15,...

6.9CVSS5.8AI score0.00431EPSS
SaveExploits0References3
Rows per page
Query Builder