Skip to content
OpenAdvisories
Medium WID-SEC-2026-1887 7 CVEs

Erlang/OTP: Mehrere Schwachstellen

Published Jun 10, 2026 · Updated Sep 28, 2026 · Revision 7 · de-DE

Vendor: Debian Vendor: Fedora Vendor: SUSE Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Erlang/OTP ausnutzen, um Sicherheitsvorkehrungen zu umgehen, Daten zu manipulieren, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen.

Product

Erlang/OTP (Open Telecom Platform) ist eine Sammlung von Bibliotheken und Tools, die auf der Programmiersprache Erlang basieren und für den Aufbau skalierbarer, fehlertoleranter und verteilter Systeme entwickelt wurden.

Vulnerabilities 7

  • High 8.8
    CVE-2026-49759

    Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

    Stack-based Buffer Overflow vulnerability in Erlang OTP erts (inet_drv) allows an unauthenticated remote attacker to crash the BEAM VM by sending a crafted SCTP ERROR chunk. The sctp_parse_error_chunk function in erts/emulator/drivers/common/inet_drv.c parses…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 7.5
    CVE-2026-48860

    Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

    Reliance on IP Address for Authentication vulnerability in Erlang/OTP ssl (inet_tls_dist module) allows unauthenticated bypass of the distribution-over-TLS LAN allowlist. The inet_tls_dist:check_ip/1 function, which enforces a LAN allowlist for Erlang distrib…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 7.1
    CVE-2026-48856

    httpc leaks Authorization header to cross-origin redirect targets

    Sensitive Data Exposure vulnerability in Erlang OTP inets (httpc_response module) allows Retrieve Embedded Sensitive Data. The httpc client forwards the Authorization and Proxy-Authorization request headers to redirect targets without checking whether the red…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.9
    CVE-2026-49760

    Stack Buffer Overflow in ei_s_print_term at Very Large Integer

    Stack-based Buffer Overflow vulnerability in Erlang OTP (erl_interface) allows Stack-based Buffer Overflow. This vulnerability is associated with program file lib/erl_interface/src/misc/ei_printterm.c and program routine ei_s_print_term. The C function ei_s_p…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-48858

    ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks

    Server-Side Request Forgery (SSRF) vulnerability in Erlang/OTP ftp (ftp_internal module) allows FTP bounce attacks and SSRF via an unvalidated PASV response IP address. The ftp_internal:handle_ctrl_result/2 PASV handler (mode=passive, ipfamily=inet, ftp_exten…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-48859

    SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

    Observable Timing Discrepancy vulnerability in Erlang/OTP ssh (ssh_auth, ssh_options modules) allows unauthenticated remote username enumeration via timing side-channel in password authentication. When the SSH daemon is configured with the user_passwords or p…

    Erlang Project OTP erlang Ubuntu
  • Low 2.3
    CVE-2026-48855

    SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Erlang OTP ssh (ssh_sftpd module) allows File Discovery. The SSH_FXP_READLINK handler in ssh_sftpd sends the raw result of file:read_link/2 to the client without calling chroot_filena…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux

Revision history

  1. #7

    Neue Updates von SUSE aufgenommen

  2. #6

    Neue Updates von Debian und openSUSE aufgenommen

  3. #5

    Neue Updates von SUSE aufgenommen

  4. #4

    Neue Updates von SUSE aufgenommen

  5. #3

    Neue Updates von Fedora aufgenommen

  6. #2

    Neue Updates von Fedora aufgenommen

  7. #1

    Initiale Fassung

References