CVE-2017-1000385

CVE-2017-1000385

Published · Updated

Follow this CVE+ Monitor erlang

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

23Vexday Risk Score

Patch soon. It has a working public exploit.

ssvc Attendepss 22%
from disclosure to weaponsame day
Published on NVDDec 12
metasploitJun 17
The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).
Affected products
n/a · n/a