Skip to content
OpenAdvisories
Critical 1 exploited CVE USN-7443-3 1 CVE

erlang vulnerability

Published Jul 17, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

USN-7443-1 fixed a vulnerability in Erlang. This update provides the
corresponding update for Ubuntu 16.04 LTS and Ubuntu 18.04 LTS.

Original advisory details:

Fabian Bäumer, Marcel Maehren, Marcus Brinkmann, and Jörg Schwenk
discovered that Erlang OTP’s SSH module incorrect handled authentication. A
remote attacker could use this issue to execute arbitrary commands without
authentication, possibly leading to a system compromise.

Fixed packages 2

ReleasePackageFixed in
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS erlang 1:18.3-dfsg-1ubuntu3.1+esm1
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS erlang 1:20.2.2+dfsg-1ubuntu2+esm1

Vulnerabilities 1

  • Critical 10.0
    CVE-2025-32433 Exploited Public exploit EPSS 99%

    Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

    Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protoc…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux Alpine
    KEV Jun 9, 2025

References

  • report
    https://ubuntu.com/security/CVE-2025-32433