CVE-2015-2774

概要

参考情報

• lists.opensuse.org/opensuse-updates/2016-02/msg00124.html · Third Party Advisory
• openwall.com/lists/oss-security/2015/03/27/6 · Third Party Advisory
• openwall.com/lists/oss-security/2015/03/27/9
• oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html · Third Party Advisory
• securityfocus.com/bid/73398
• usn.ubuntu.com/3571-1
• web.archive.org/web/20150905124006/http://www.erlang.org/news/85 · Release Notes
• imperialviolet.org/2014/12/08/poodleagain.html · Technical Description

erlang/otp のその他の脆弱性

• CVE-2026-59251高 7.5Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to caus…
• CVE-2026-58227高 7.5The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshak…
• CVE-2026-55953高 7.4The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was amo…
• CVE-2026-55737高 7.5Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erl…
• CVE-2026-54890高 7.5Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced I…