Skip to content
OpenAdvisories
Medium WID-SEC-2026-2194 6 CVEs

Erlang/OTP: Mehrere Schwachstellen

Published Jul 2, 2026 · Updated Sep 28, 2026 · Revision 8 · de-DE

Vendor: Debian Vendor: Fedora Vendor: Microsoft Vendor: Red Hat Vendor: SUSE Product: Azure Linux Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: openSUSE Platform: Linux

Summary

Ein Angreifer kann mehrere Schwachstellen in Erlang/OTP ausnutzen, um einen Denial of Service Angriff durchzuführen, um Informationen offenzulegen, und um Sicherheitsvorkehrungen zu umgehen.

Product

Erlang/OTP (Open Telecom Platform) ist eine Sammlung von Bibliotheken und Tools, die auf der Programmiersprache Erlang basieren und für den Aufbau skalierbarer, fehlertoleranter und verteilter Systeme entwickelt wurden.

Vulnerabilities 6

  • High 8.7
    CVE-2026-55950

    DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

    Time-of-check Time-of-use (TOCTOU) race condition vulnerability in Erlang/OTP ssl (dtls_packet_demux module) allows an unauthenticated remote attacker to crash all active DTLS sessions on a listener. A DTLS server listener uses a single shared dtls_packet_dem…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 8.2
    CVE-2026-55952

    TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

    The Erlang/OTP ssl application does not validate that the PSK identity list and binder list carried in a TLS 1.3 ClientHello pre-shared key extension have equal length before passing them to the session ticket handler. In tls_handshake_1_3:handle_pre_shared_k…

    Erlang Project OTP erlang erlang Debian Ubuntu
  • Medium 6.3
    CVE-2026-54887

    DTLS server cookie bypass during startup window due to empty initial cookie secret

    Use of Default Cryptographic Key vulnerability in Erlang/OTP ssl (DTLS server) allows predictable DTLS cookie computation during the startup window, enabling source address verification bypass. On DTLS server startup, dtls_server_connection:initial_hello/3 in…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 6.3
    CVE-2026-54891

    Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

    Improper Enforcement of Message Integrity During Transmission in a Communication Channel vulnerability in Erlang/OTP ssl (tls_gen_connection module) allows a network-positioned attacker to inject unauthenticated plaintext that the TLS client application later…

    Erlang Project OTP erlang erlang Debian Ubuntu
  • Medium 5.3
    CVE-2026-54886

    SSH SFTP server denial of service via extended channel data infinite loop

    Loop with Unreachable Exit Condition ('Infinite Loop') vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to render an SFTP channel permanently unresponsive. The handle_data/4 function in ssh_sftpd contains a catch-all clause…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Low 2.3
    CVE-2026-53422

    SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

    Observable Response Discrepancy vulnerability in Erlang OTP ssh (ssh_sftpd module) allows an authenticated SFTP user to enumerate the existence of files and directories outside the configured root directory. The SSH_FXP_REALPATH handler in ssh_sftpd calls rel…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux

Revision history

  1. #8

    Neue Updates von SUSE aufgenommen

  2. #7

    Neue Updates von openSUSE und Debian aufgenommen

  3. #6

    Neue Updates von SUSE aufgenommen

  4. #5

    Neue Updates von SUSE aufgenommen

  5. #4

    Neue Updates aufgenommen

  6. #3

    Neue Updates von Fedora aufgenommen

  7. #2

    Neue Updates von Red Hat aufgenommen

  8. #1

    Initiale Fassung

References