The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20, a SSH server may allow an attacker to perform unauthenticated remote code execution (RCE). By exploiting a flaw in SSH protocol message handling, a malicious actor could gain unauthorized access to affected systems and execute arbitrary commands without valid credentials. This issue is patched in versions OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20. A temporary workaround involves disabling the SSH server or to prevent access via firewall rules.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alpine Linux | — | Upgrade erlang | Aug 8, 2025 | Apr 16, 2025 |
| Debian | — | Upgrade erlang | Apr 21, 2025 | Apr 16, 2025 |
| Freebsd | — | Upgrade erlang-runtime21Upgrade erlang-runtime27Upgrade erlang-runtime26Upgrade erlang-runtime24Upgrade erlang-runtime23Upgrade erlang-runtime22Upgrade erlang-runtime25Upgrade erlang | Apr 22, 2025 | Apr 20, 2025 |
| Suse | — | Upgrade erlang-diameterUpgrade erlang-dialyzer-srcUpgrade erlang-dialyzerUpgrade erlang-reltoolUpgrade erlang26-observerUpgrade erlang-epmdUpgrade erlang26-debugger-srcUpgrade erlang26-observer-srcUpgrade erlang26-jinterfaceUpgrade erlang26-reltoolUpgrade erlang-etUpgrade erlang26-reltool-srcUpgrade erlang26-et-srcUpgrade erlang-jinterface-srcUpgrade erlang-diameter-srcUpgrade erlang26-dialyzer-srcUpgrade erlang26-jinterface-srcUpgrade erlang26Upgrade erlang-reltool-srcUpgrade erlang-docUpgrade erlang26-wxUpgrade erlang26-etUpgrade erlang-jinterfaceUpgrade erlang-srcUpgrade erlang26-wx-srcUpgrade erlang26-dialyzerUpgrade erlangUpgrade erlang-wxUpgrade erlang-et-srcUpgrade erlang26-epmdUpgrade erlang-debuggerUpgrade erlang-debugger-srcUpgrade erlang26-docUpgrade erlang26-debuggerUpgrade erlang26-srcUpgrade erlang-wx-srcUpgrade erlang26-diameterUpgrade erlang-observer-srcUpgrade erlang26-diameter-srcUpgrade erlang-observer | Dec 5, 2025 | Apr 22, 2025 |
| Ubuntu | — | Upgrade erlang (Ubuntu Pro)Upgrade erlangUpgrade erlang-sshUpgrade erlang-ssh (Ubuntu Pro) | Apr 21, 2025 | Apr 16, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Apr 16, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub