Skip to content
OpenAdvisories
High DLA-4376-1 4 CVEs

erlang - security update

Published Nov 24, 2025 · Updated Nov 24, 2025

Fixed packages 1

ReleasePackageFixed in
Debian · 11 erlang 1:23.2.6+dfsg-1+deb11u3

Vulnerabilities 4

  • High 7.1

    SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 …

  • Medium 5.3

    Unverified File Handles can Cause Excessive Use of System Resources

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP …

  • Medium 5.3

    Unverified Paths can Cause Excessive Use of System Resources

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP …

  • Medium 4.8

    Absolute path traversal in zip:unzip/1,2

    Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Erlang OTP (stdlib modules) allows Absolute Path Traversal, File Manipulation. This vulnerability is associated with program files lib/stdlib/src/zip.erl and progr…