EEF-CVE-2025-48038
- Source
- https://cna.erlef.org/osv/EEF-CVE-2025-48038.html
- Import Source
- https://cna.erlef.org/osv/EEF-CVE-2025-48038.json
- JSON Data
- https://api.osv.dev/v1/vulns/EEF-CVE-2025-48038
- Aliases
-
- CVE-2025-48038
- GHSA-pvj7-9652-7h9r
- Published
- 2025-09-11T08:13:04.030Z
- Modified
- 2026-07-14T03:30:11.852893297Z
- Severity
-
- 5.3 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N CVSS Calculator
- Summary
- Unverified File Handles can Cause Excessive Use of System Resources
- Details
-
Summary
Allocation of Resources Without Limits or Throttling vulnerability in Erlang OTP ssh (ssh_sftp modules) allows Excessive Allocation, Resource Leak Exposure. This vulnerability is associated with program files lib/ssh/src/ssh_sftpd.erl.
This issue affects OTP from OTP 17.0 until OTP 28.0.3, OTP 27.3.4.3 and 26.2.5.15 corresponding to ssh from 3.0.1 until 5.3.3, 5.2.11.3 and 5.1.4.12.
Workaround
* Disable sftp * limiting number of max_sessions allowed for sshd, so exploiting becomes more complicated
Configuration
The SFTP subsystem must be enabled on the SSH server and the SSH port must be reachable by the attacker. SFTP is enabled by default unless explicitly disabled by setting {subsystems, []} in the SSH daemon configuration.
- Database specific
{ "capec_ids": [ "CAPEC-130", "CAPEC-131" ], "cwe_ids": [ "CWE-770", "CWE-400" ], "cpe_ids": [ "cpe:2.3:a:erlang:erlang\\/otp:*:*:*:*:*:*:*:*" ] }- References
-
- https://github.com/erlang/otp/security/advisories/GHSA-pvj7-9652-7h9r
- https://cna.erlef.org/cves/CVE-2025-48038.html
- https://www.erlang.org/doc/system/versions.html#order-of-versions
- https://github.com/erlang/otp/pull/10156
- https://github.com/erlang/otp/commit/4e3bf86777ab3db7220c11d8ddabf15970ddd10a
- https://github.com/erlang/otp/commit/f09e0201ff701993dc24a08f15e524daf72db42f
- Credits
-
-
- Jakub Witczak - REMEDIATION_DEVELOPER
-
- Ingela Anderton Andin - REMEDIATION_REVIEWER
-
Affected packages
Git / github.com/erlang/otp
Affected versions
OTP-17.*
OTP-17.0
OTP-18.*
OTP-18.0
OTP-18.0-rc1
OTP-19.*
OTP-19.0
OTP-19.0-rc1
OTP-19.0-rc2
OTP-20.*
OTP-20.0
OTP-20.0-rc1
OTP-20.0-rc2
OTP-21.*
OTP-21.0
OTP-21.0-rc1
OTP-21.0-rc2
OTP-22.*
OTP-22.0
OTP-22.0-rc1
OTP-22.0-rc2
OTP-22.0-rc3
OTP-23.*
OTP-23.0
OTP-23.0-rc1
OTP-23.0-rc2
OTP-23.0-rc3
OTP-24.*
OTP-24.0
OTP-24.0-rc1
OTP-24.0-rc2
OTP-24.0-rc3
OTP-25.*
OTP-25.0
OTP-25.0-rc1
OTP-25.0-rc2
OTP-25.0-rc3
OTP-26.*
OTP-26.0
OTP-26.0-rc1
OTP-26.0-rc2
OTP-26.0-rc3
OTP-26.1
OTP-26.2
OTP-26.2.3
OTP-26.2.4
OTP-26.2.5
OTP-26.2.5.1
OTP-26.2.5.10
OTP-26.2.5.11
OTP-26.2.5.12
OTP-26.2.5.13
OTP-26.2.5.14
OTP-26.2.5.2
OTP-26.2.5.3
OTP-26.2.5.4
OTP-26.2.5.5
OTP-26.2.5.6
OTP-26.2.5.7
OTP-26.2.5.8
OTP-26.2.5.9
OTP-27.*
OTP-27.0
OTP-27.0-rc1
OTP-27.0-rc2
OTP-27.0-rc3
OTP-27.1
OTP-27.2
OTP-27.3
OTP-27.3.1
OTP-27.3.2
OTP-27.3.3
OTP-27.3.4
Other
patch-base-26
patch-base-27