Skip to content
OpenAdvisories
High USN-7831-1 4 CVEs

erlang vulnerabilities

Published Oct 21, 2025 · Updated Jun 25, 2026

Ecosystem: Ubuntu

Summary

It was discovered that Erlang incorrectly handled resource allocation and
consumption in the SFTP SSH module. An attacker could possibly use this
issue cause Erlang to consume excessive resources, leading to a denial of
service.

Fixed packages 7

ReleasePackageFixed in
Ubuntu · 22.04 LTS 22.04:LTS erlang 1:24.2.1+dfsg-1ubuntu0.6
Ubuntu · 24.04 LTS 24.04:LTS erlang 1:25.3.2.8+dfsg-1ubuntu4.5
Ubuntu · 25.10 erlang 1:27.3.4.1+dfsg-1ubuntu0.1
Ubuntu · Pro 14.04 LTS Pro:14.04:LTS erlang 1:16.b.3-dfsg-1ubuntu2.2+esm1
Ubuntu · Pro 16.04 LTS Pro:16.04:LTS erlang 1:18.3-dfsg-1ubuntu3.1+esm2
Ubuntu · Pro 18.04 LTS Pro:18.04:LTS erlang 1:20.2.2+dfsg-1ubuntu2+esm2
Ubuntu · Pro 20.04 LTS Pro:20.04:LTS erlang 1:22.2.7+dfsg-1ubuntu0.5+esm1

Vulnerabilities 4

  • High 7.1
    CVE-2025-48041

    SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 …

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.9
    CVE-2025-48040

    Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

    Uncontrolled Resource Consumption vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Flooding. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP from OTP 17.0 before OTP 26.2.5.1…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2025-48038

    Unverified File Handles can Cause Excessive Use of System Resources

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP …

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 5.3
    CVE-2025-48039

    Unverified Paths can Cause Excessive Use of System Resources

    Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl. This issue affects OTP …

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux

References

  • report
    https://ubuntu.com/security/CVE-2025-48038
  • report
    https://ubuntu.com/security/CVE-2025-48039
  • report
    https://ubuntu.com/security/CVE-2025-48040
  • report
    https://ubuntu.com/security/CVE-2025-48041