Erlang OTP

Erlang/OTP SSH Vulnerable to Pre-Authentication RCE

In CISA KEValso in 17 other products

httpd parks a request worker indefinitely on a malformed chunk size sent after the headers

also in 3 other products

httpd does not enforce the documented default max_clients connection limit

also in 3 other products

httpd mod_auth directory protection bypassed by a doubled slash in the request path

also in 3 other products

httpd mod_auth directory protection bypassed by request path casing on case-insensitive filesystems

also in 3 other products

Erlang OTP: Heap-based Buffer Overflow

also in 3 other products

httpd applies no timeout while receiving a request body, parking a worker on a stalled client

also in 3 other products

httpc memory exhaustion via unbounded response header accumulation

also in 3 other products

Megaco flex scanner buffer overflow via oversized property parm name

also in 3 other products

Erlang OTP: Key Exchange without Entity Authentication

also in 2 other products

inets,httpd: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception

also in 3 other products

inets, httpd: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping i

also in 3 other products

inets,httpd:HTTP Request Smuggling via obs-fold Header Continuation

also in 3 other products

TLS 1.3 client ticket store crashed by NewSessionTicket with empty early_data extension in ssl

also in 1 other product

uri_string does not bound the port component of a URI before integer conversion

also in 3 other products

inets, httpd: HTTP Request Smuggling via Transfer-Encoding and Content-Length

also in 3 other products

ScriptAlias CGI targets bypass directory auth in inets httpd (mod_auth vs mod_cgi path mismatch)

also in 6 other products

snmp BER INTEGER decoder applies no size limit to attacker-supplied integer fields

also in 3 other products

Stack buffer overflow in SCTP error cause parsing in inet_drv allows remote VM crash

also in 9 other products

inets, httpd: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth

also in 2 other products

Request smuggling via first-wins Content-Length parsing in inets httpd

also in 5 other products

eldap does not bound the port component of a referral URL before integer conversion

also in 3 other products

httpc does not bound server-supplied numeric header values before integer conversion

also in 1 other product

TLS 1.3 server denial of service via malformed ClientHello pre-shared key extension

also in 5 other products

SSH SFTP packet size not verified properly in Erlang OTP

also in 2 other products