Vulnerabilidades em Erlang
67 resultadosAnálise Vexday
Erlang apresenta 29 vulnerabilidades catalogadas sem nenhuma sob exploração ativa, mas com 17 divulgadas nos últimos 90 dias sinalizando atividade recente de descoberta. A ausência de vulnerabilidades críticas (CVSS) e a fraqueza dominante em CWE-400 (controle inadequado de recursos) sugerem risco moderado, recomendando monitoramento contínuo e atualização regular em vez de ação imediata.
CVE-2025-46712LOWErlang/OTP SSH Has Strict KEX ViolationsEPSS 0.5%CVE-2026-73812HIGHinets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-LengthEPSS 0.5%CVE-2026-21620LOWTFTP Path TraversalEPSS 0.5%CVE-2025-26618HIGHSSH SFTP packet size not verified properly in Erlang OTPEPSS 0.5%CVE-2026-49759HIGHStack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crashEPSS 0.5%CVE-2026-55952HIGHTLS 1.3 server denial of service via malformed ClientHello pre-shared key extensionEPSS 0.5%CVE-2026-23941HIGHRequest smuggling via first-wins Content-Length parsing in inets httpdEPSS 0.5%CVE-2025-30211HIGHKEX init error results with excessive memory usageEPSS 0.5%CVE-2026-94200HIGHTLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in sslEPSS 0.5%CVE-2026-89422CRITICALTLS 1.3 client skips server authentication when ServerHello carries an unsolicited pre_shared_key extensionEPSS 0.5%CVE-2026-103060HIGHPath traversal in rebar3 via unvalidated dependency app namesEPSS 0.5%CVE-2025-48040MEDIUMMalicious Key Exchange Messages may Lead to Excessive Resource ConsumptionEPSS 0.4%CVE-2026-105274LOWhex_core decompresses registry and Erlang term API responses without size limitsEPSS 0.4%CVE-2026-42792MEDIUMepmd permanent DoS via EMFILE on accept(2) in ertsEPSS 0.4%CVE-2026-54890HIGHBEAM VM crash via integer underflow in binary_to_term BIT_BINARY_EXT decodingEPSS 0.4%CVE-2025-48039MEDIUMUnverified Paths can Cause Excessive Use of System ResourcesEPSS 0.4%CVE-2025-48038MEDIUMUnverified File Handles can Cause Excessive Use of System ResourcesEPSS 0.4%CVE-2025-48041HIGHSSH_FXP_OPENDIR may Lead to Exhaustion of File HandlesEPSS 0.4%CVE-2026-58227HIGHTLS/DTLS denial of service via unbounded recursion on cross-signed peer certificate chainEPSS 0.4%CVE-2026-23942MEDIUMSFTP root escape via component-agnostic prefix check in ssh_sftpdEPSS 0.4%