CVE-2017-1000385

概要

参考情報

• erlang.org/pipermail/erlang-questions/2017-November/094255.html · Issue Tracking
• erlang.org/pipermail/erlang-questions/2017-November/094256.html · Issue Tracking
• erlang.org/pipermail/erlang-questions/2017-November/094257.html · Issue Tracking
• securityfocus.com/bid/102197 · Third Party Advisory
• access.redhat.com/errata/RHSA-2018:0242
• access.redhat.com/errata/RHSA-2018:0303
• access.redhat.com/errata/RHSA-2018:0368
• access.redhat.com/errata/RHSA-2018:0528
• lists.debian.org/debian-lts-announce/2017/12/msg00010.html
• robotattack.org · Issue Tracking
• usn.ubuntu.com/3571-1
• debian.org/security/2017/dsa-4057 · Issue Tracking
• kb.cert.org/vuls/id/144389

erlang/otp のその他の脆弱性

• CVE-2026-59251高 7.5Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to caus…
• CVE-2026-58227高 7.5The Erlang/OTP ssl application does not detect cycles when reconstructing an incomplete peer certificate chain during a TLS or DTLS handshak…
• CVE-2026-55953高 7.4The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was amo…
• CVE-2026-55737高 7.5Signed to Unsigned Conversion Error and Out-of-bounds Write vulnerability in Erlang OTP erts allows an attacker who can supply a crafted Erl…
• CVE-2026-54890高 7.5Integer Underflow (Wrap or Wraparound) vulnerability in erlang otp erlang/otp (erts modules), erlang otp erts (erts modules) allows Forced I…