Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-7443-2 1 CVE

erlang vulnerability

Published Apr 23, 2025 · Updated Feb 4, 2026

Ecosystem: Ubuntu

Summary

USN-7443-1 fixed a vulnerability in Erlang. This update provides the
corresponding update for Ubuntu 25.04.

Original advisory details:

Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk
discovered that Erlang OTP’s SSH module incorrect handled authentication.
A remote attacker could use this issue to execute arbitrary commands
without authentication, possibly leading to a system compromise.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 25.04 erlang 1:27.3+dfsg-1ubuntu1.1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-32433 Exploited Public exploit EPSS 99%

    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoc…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux Alpine
    KEV Jun 9, 2025

References

  • report
    https://ubuntu.com/security/CVE-2025-32433