Skip to content
OpenAdvisories
High WID-SEC-2026-2533 8 CVEs

Erlang/OTP: Mehrere Schwachstellen

Published Jul 27, 2026 · Updated Sep 28, 2026 · Revision 8 · de-DE

Vendor: Debian Vendor: Fedora Vendor: Red Hat Vendor: SUSE Vendor: Ubuntu Product: Enterprise Linux Product: Linux Product: Linux Product: Linux Product: Linux Product: openSUSE

Summary

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Erlang/OTP ausnutzen, um einen Denial of Service Angriff durchzuführen, beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen sowie Daten zu manipulieren oder offenzulegen.

Product

Erlang/OTP (Open Telecom Platform) ist eine Sammlung von Bibliotheken und Tools, die auf der Programmiersprache Erlang basieren und für den Aufbau skalierbarer, fehlertoleranter und verteilter Systeme entwickelt wurden.

Vulnerabilities 8

  • Critical 9.1
    CVE-2026-55953

    TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

    The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tls_handshake:hello/5 handler validates the negotia…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 8.7
    CVE-2026-58227

    TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

    The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshake. In ssl_certificate:handle_incomplete_chain/5, the received chain is passed to ssl_certificate:build_certificate_chai…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 8.7
    CVE-2026-59251

    Denial of service via exponential certificate policy tree growth in path validation

    Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy proce…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 8.3
    CVE-2026-59250

    Megaco flex scanner buffer overflow via oversized property parm name

    Classic buffer overflow in the Erlang/OTP megaco flex scanner C driver allows a remote unauthenticated attacker to corrupt the driver's memory (and potentially achieve remote code execution or a denial-of-service crash) by sending a single text-encoded H.248/…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • High 8.2
    CVE-2026-54890

    BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

    Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced Integer Overflow, Excessive Allocation. This vulnerability is associated with program files erts/emulator/beam/external.…

    Erlang Project OTP erlang erlang Debian Ubuntu
  • Medium 6.3
    CVE-2026-42792

    epmd permanent DoS via EMFILE on accept(2) in erts

    Improper Handling of Exceptional Conditions vulnerability in Erlang OTP erts (epmd) allows an unauthenticated remote attacker to permanently terminate the Erlang Port Mapper Daemon (epmd) via connection slot exhaustion. The do_accept function in erts/epmd/src…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 5.1
    CVE-2026-55737

    Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

    Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erlang external term format (ETF) binary to binary_to_term/1 to corrupt the BEAM heap pointer and crash the virtual machin…

    Erlang Project OTP erlang erlang Debian Ubuntu Azure Linux
  • Medium 4.8
    CVE-2026-47078

    Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass

    Relative Path Traversal vulnerability in Erlang OTP (stdlib zip module) allows writing files outside the intended extraction directory via a crafted zip archive. zip:unzip/1,2 and zip:extract/1,2 validate entry paths using zip:check_dir_level/2, which tracks …

    Erlang Project OTP erlang erlang Debian Ubuntu

Revision history

  1. #8

    Neue Updates von SUSE und Ubuntu aufgenommen

  2. #7

    Neue Updates von Fedora aufgenommen

  3. #6

    Neue Updates von openSUSE und Debian aufgenommen

  4. #5

    Neue Updates von SUSE aufgenommen

  5. #4

    Neue Updates von SUSE aufgenommen

  6. #3

    Neue Updates von Fedora aufgenommen

  7. #2

    Neue Updates von Red Hat aufgenommen

  8. #1

    Initiale Fassung

References