| Package | Affected versions | Patched versions |
|---|---|---|
| erlang/otp | = 18.3.4.7= 19.3.6.4= 20.1.7 |
The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free