| Package | Affected versions | Patched versions |
|---|---|---|
| erlang/otp | = 18.0= 18.0.1= 18.0.2= 18.0.3= 18.1= 18.1.1= 18.1.2= 18.1.3= 18.1.4= 18.1.5= 18.2= 18.2.1= 18.2.2= 18.2.3= 18.2.4= 18.2.4.1= 18.3= 18.3.1= 18.3.2= 18.3.3= 18.3.4= 18.3.4.1= 18.3.4.2= 18.3.4.3= 18.3.4.4= 18.3.4.5= 19.0= 19.0.1= 19.0.2= 19.0.3= 19.0.4= 19.0.5= 19.0.6= 19.0.7= 19.1= 19.1.1= 19.1.2= 19.1.3= 19.1.4= 19.1.5= 19.1.6= 19.1.6.1= 19.2= 19.2.1= 19.2.2= 19.2.3= 19.2.3.1= 19.3= 19.3.1= 19.3.2= 19.3.3= 19.3.4= 19.3.5= 19.3.6= 19.3.6.1= 19.3.6.2= 19.3.6.3= 19.3.6.4= 19.3.6.5= 19.3.6.6= 19.3.6.7= 19.3.6.8= 19.3.6.9 |
An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free