Erlang OTP.

TLS 1.2 session resumption in ssl crosses SNI virtual-host client-certificate trust boundaries

• Erlang OTP
• Weak cryptography or TLS

TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

• Erlang OTP
• CWE-1288

Superlinear CPU denial of service in Erlang/OTP ASN.1 OBJECT IDENTIFIER decoder

• Erlang OTP
• Denial of service

SSH daemon allocates unbounded idle session channels, bypassing max_channels

• Erlang OTP
• Denial of service

TLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extension

• Erlang OTP
• CWE-322

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

• Erlang OTP
• Denial of service

eldap does not bound the port component of a referral URL before integer conversion

• Erlang OTP
• CWE-1284

snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields

• Erlang OTP
• CWE-1284

httpd mod_auth directory protection bypassed by a doubled slash in the request path

• Erlang OTP
• CWE-50

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

• Erlang OTP
• CWE-178

A Signed Length Overflow in Erlang/OTP's inet TCP Driver Overflows the Receive Buffer Into BEAM VM Memory From an Unauthenticated Peer

• Erlang OTP
• Memory corruption

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

• Erlang OTP
• Broken access control
• CWE-1289

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

• Erlang OTP
• Denial of service

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

• Erlang OTP
• HTTP request smuggling

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

• Erlang OTP
• HTTP request smuggling

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

• Erlang OTP
• HTTP request smuggling

uri_string does not bound the port component of a URI before integer conversion

• Erlang OTP
• CWE-1284

httpc memory exhaustion via unbounded response header accumulation

• Erlang OTP
• Denial of service

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

• Erlang OTP
• Denial of service

httpc does not bound server-supplied numeric header values before integer conversion

• Erlang OTP
• CWE-1284

httpd does not enforce the documented default max_clients connection limit

• Erlang OTP
• Denial of service

BEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decoding

• Erlang OTP
• Memory corruption
• Denial of service

Denial of service via exponential certificate policy tree growth in path validation

• Erlang OTP
• Denial of service

Megaco flex scanner buffer overflow via oversized property parm name

• Erlang OTP
• Memory corruption

TLS 1.2 and DTLS client accepts unoffered anonymous cipher suite, bypassing server authentication

• Erlang OTP
• CWE-757

Heap pointer corruption via signed/unsigned mismatch in LARGE_TUPLE_EXT decoding in erts external term format decoder

• Erlang OTP
• Memory corruption
• CWE-195

Relative path traversal in zip:unzip/zip:extract via check_dir_level depth-counter bypass

• Erlang OTP
• Path traversal

epmd permanent DoS via EMFILE on accept(2) in erts

• Erlang OTP
• Denial of service
• CWE-755

TLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chain

• Erlang OTP
• Denial of service

Plaintext APPLICATION_DATA injected during TLS handshake delivered to client application post-handshake in ssl

• Erlang OTP
• CWE-924

DTLS listener crash via race condition in dtls_packet_demux causes denial of service for all sessions

• Erlang OTP
• Race condition

SSH SFTP server denial of service via extended channel data infinite loop

• Erlang OTP
• Denial of service

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

• Erlang OTP
• CWE-1284

DTLS server cookie bypass during startup window due to empty initial cookie secret

• Erlang OTP
• CWE-1394

SFTP REALPATH path-existence oracle allowing filesystem enumeration outside configured root

• Erlang OTP
• CWE-204

httpc leaks Authorization header to cross-origin redirect targets

• Erlang OTP
• Open redirect

Distribution-over-TLS LAN allowlist silently bypassed due to sockname/peername confusion in inet_tls_dist

• Erlang OTP
• Broken access control
• CWE-1025

SFTP READLINK Leaks Absolute Backend Filesystem Path When Root Is Configured

• Erlang OTP
• Information disclosure

ftp client PASV response IP not validated against control peer, enabling SSRF and FTP bounce attacks

• Erlang OTP
• Server-side request forgery (SSRF)

SSH server timing side-channel in ssh_auth:check_password/3 allows unauthenticated username enumeration

• Erlang OTP
• CWE-208

Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

• Erlang OTP
• Memory corruption

Stack Buffer Overflow in ei_s_print_term at Very Large Integer

• Erlang OTP
• Memory corruption

nameConstraints DNS bypass via subject CommonName fallback in public_key hostname verification

• Erlang OTP
• Weak cryptography or TLS

OCSP responder certificate validity period not checked in public_key

• Erlang OTP
• Weak cryptography or TLS
• CWE-672

Non-CA certificate accepted as intermediate issuer in public_key path validation

• Erlang OTP
• Weak cryptography or TLS
• CWE-296

SFTP chroot bypass via path traversal in SSH_FXP_FSETSTAT

• Erlang OTP
• Path traversal

ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)

• Erlang OTP
• Broken access control
• CWE-551

OCSP designated-responder authorization bypass via missing signature verification

• Erlang OTP
• Weak cryptography or TLS

Predictable DNS Transaction IDs Enable Cache Poisoning in Built-in Resolver

• Erlang OTP
• CWE-340

Request smuggling via first-wins Content-Length parsing in inets httpd

• Erlang OTP
• HTTP request smuggling

Pre-auth SSH DoS via unbounded zlib inflate

• Erlang OTP
• CWE-409

SFTP root escape via component-agnostic prefix check in ssh_sftpd

• Erlang OTP
• Path traversal

TFTP Path Traversal

• Erlang OTP
• Path traversal

SSH_FXP_OPENDIR may Lead to Exhaustion of File Handles

• Erlang OTP
• Denial of service

Malicious Key Exchange Messages may Lead to Excessive Resource Consumption

• Erlang OTP
• Denial of service

Unverified Paths can Cause Excessive Use of System Resources

• Erlang OTP
• Denial of service

Unverified File Handles can Cause Excessive Use of System Resources

• Erlang OTP
• Denial of service

Absolute path traversal in zip:unzip/1,2

• Erlang OTP
• Path traversal

Erlang/OTP SSH Has Strict KEX Violations

• erlang otp
• CWE-440

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

• erlang otp
• Authentication bypass