Erlang/OTP is a set of libraries for the Erlang programming language. Prior to versions OTP-27.3.1, 26.2.5.10, and 25.3.2.19, a maliciously formed KEX init message can result with high memory usage. Implementation does not verify RFC specified limits on algorithm names (64 characters) provided in KEX init message. Big KEX init packet may lead to inefficient processing of the error data. As a result, large amount of memory will be allocated for processing malicious data. Versions OTP-27.3.1, OTP-26.2.5.10, and OTP-25.3.2.19 fix the issue. Some workarounds are available. One may set option `parallel_login` to `false` and/or reduce the `max_sessions` option.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade erlang | Apr 21, 2025 | Mar 28, 2025 |
| Suse | — | Upgrade erlang26-wx-srcUpgrade erlang26-epmdUpgrade erlang26-diameter-srcUpgrade erlang26Upgrade erlang26-debuggerUpgrade erlang26-dialyzerUpgrade erlang26-jinterfaceUpgrade erlang26-observer-srcUpgrade erlang26-srcUpgrade erlang26-diameterUpgrade erlang26-debugger-srcUpgrade erlang26-reltool-srcUpgrade erlang26-reltoolUpgrade erlang26-et-srcUpgrade erlang26-docUpgrade erlang26-wxUpgrade erlang26-etUpgrade erlang26-dialyzer-srcUpgrade erlang26-observerUpgrade erlang26-jinterface-src | Dec 5, 2025 | Apr 22, 2025 |
| Ubuntu | — | Upgrade erlang (Ubuntu Pro)Upgrade erlang-ic-java (Ubuntu Pro)Upgrade erlang-observerUpgrade erlang-xmerl (Ubuntu Pro)Upgrade erlang-baseUpgrade erlang-edoc (Ubuntu Pro)Upgrade erlang-toolbar (Ubuntu Pro)Upgrade erlangUpgrade erlang-x11Upgrade erlang-runtime-toolsUpgrade erlang-docUpgrade erlang-sslUpgrade erlang-inetsUpgrade erlang-dialyzer (Ubuntu Pro)Upgrade erlang-tv (Ubuntu Pro)Upgrade erlang-odbc (Ubuntu Pro)Upgrade erlang-jinterfaceUpgrade erlang-mnesiaUpgrade erlang-diameter (Ubuntu Pro)Upgrade erlang-et (Ubuntu Pro)Upgrade erlang-sshUpgrade erlang-xmerlUpgrade erlang-runtime-tools (Ubuntu Pro)Upgrade erlang-tools (Ubuntu Pro)Upgrade erlang-snmp (Ubuntu Pro)Upgrade erlang-examplesUpgrade erlang-asn1 (Ubuntu Pro)Upgrade erlang-tftpUpgrade erlang-megaco (Ubuntu Pro)Upgrade erlang-eldap (Ubuntu Pro)Upgrade erlang-wx (Ubuntu Pro)Upgrade erlang-common-test (Ubuntu Pro)Upgrade erlang-webtool (Ubuntu Pro)Upgrade erlang-nox (Ubuntu Pro)Upgrade erlang-src (Ubuntu Pro)Upgrade erlang-syntax-toolsUpgrade erlang-etUpgrade erlang-crypto (Ubuntu Pro)Upgrade erlang-base (Ubuntu Pro)Upgrade erlang-syntax-tools (Ubuntu Pro)Upgrade erlang-appmon (Ubuntu Pro)Upgrade erlang-eldapUpgrade erlang-debuggerUpgrade erlang-diameterUpgrade erlang-examples (Ubuntu Pro)Upgrade erlang-gs (Ubuntu Pro)Upgrade erlang-manpagesUpgrade erlang-reltool (Ubuntu Pro)Upgrade erlang-srcUpgrade erlang-noxUpgrade erlang-common-testUpgrade erlang-wxUpgrade erlang-x11 (Ubuntu Pro)Upgrade erlang-corba (Ubuntu Pro)Upgrade erlang-eunit (Ubuntu Pro)Upgrade erlang-erl-docgenUpgrade erlang-snmpUpgrade erlang-cryptoUpgrade erlang-manpages (Ubuntu Pro)Upgrade erlang-ftp (Ubuntu Pro)Upgrade erlang-typer (Ubuntu Pro)Upgrade erlang-reltoolUpgrade erlang-devUpgrade erlang-ssl (Ubuntu Pro)Upgrade erlang-test-server (Ubuntu Pro)Upgrade erlang-percept (Ubuntu Pro)Upgrade erlang-os-monUpgrade erlang-parsetools (Ubuntu Pro)Upgrade erlang-asn1Upgrade erlang-edocUpgrade erlang-observer (Ubuntu Pro)Upgrade erlang-parsetoolsUpgrade erlang-os-mon (Ubuntu Pro)Upgrade erlang-ftpUpgrade erlang-doc (Ubuntu Pro)Upgrade erlang-base-hipe (Ubuntu Pro)Upgrade erlang-toolsUpgrade erlang-public-key (Ubuntu Pro)Upgrade erlang-dev (Ubuntu Pro)Upgrade erlang-modeUpgrade erlang-inets (Ubuntu Pro)Upgrade erlang-jinterface (Ubuntu Pro)Upgrade erlang-ic (Ubuntu Pro)Upgrade erlang-dialyzerUpgrade erlang-tftp (Ubuntu Pro)Upgrade erlang-erl-docgen (Ubuntu Pro)Upgrade erlang-eunitUpgrade erlang-public-keyUpgrade erlang-mode (Ubuntu Pro)Upgrade erlang-ssh (Ubuntu Pro)Upgrade erlang-mnesia (Ubuntu Pro)Upgrade erlang-pman (Ubuntu Pro)Upgrade erlang-debugger (Ubuntu Pro)Upgrade erlang-megacoUpgrade erlang-odbc | Apr 9, 2025 | Mar 28, 2025 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jul 2, 2025 | Mar 28, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub