The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Aruba Aos Cx | — | Upgrade Aruba AOS-CX to a fixed version | Feb 24, 2025 | Feb 22, 2022 |
| Debian | — | Upgrade erlang | Dec 8, 2017 | Dec 8, 2017 |
| Oracle Solaris | — | Upgrade runtime/erlang to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4Upgrade runtime/erlang/documentation to version 21.0-11.4.6.0.1.1.0 on Solaris 11.4 | Feb 20, 2019 | Dec 12, 2017 |
| Suse | — | Upgrade erlang-diameter-srcUpgrade erlang-et-srcUpgrade erlang-diameterUpgrade erlang-jinterfaceUpgrade erlang-etUpgrade erlang-debuggerUpgrade erlang-observerUpgrade erlang-dialyzerUpgrade erlang-dialyzer-srcUpgrade erlang-wxUpgrade erlang-srcUpgrade erlang-reltoolUpgrade erlang-gsUpgrade erlang-epmdUpgrade erlang-reltool-srcUpgrade erlang-gs-srcUpgrade erlang-debugger-srcUpgrade erlang-docUpgrade erlang-jinterface-srcUpgrade erlang-observer-srcUpgrade erlangUpgrade erlang-wx-src | Dec 9, 2017 | Dec 8, 2017 |
| Ubuntu | — | Upgrade erlang | Feb 15, 2018 | Dec 8, 2017 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Dec 12, 2017 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub