It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS. (CVE-2014-1693)
It was discovered that Erlang incorrectly checked CBC padding bytes. A remote attacker could possibly use this issue to perform a padding oracle attack and decrypt traffic. This issue only affected Ubuntu 14.04 LTS. (CVE-2015-2774)
It was discovered that Erlang incorrectly handled certain regular expressions. A remote attacker could possibly use this issue to cause Erlang to crash, resulting in a denial of service, or execute arbitrary code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10253)
Hanno Böck, Juraj Somorovsky and Craig Young discovered that the Erlang otp TLS server incorrectly handled error reporting. A remote attacker could possibly use this issue to perform a variation of the Bleichenbacher attack and decrypt traffic or sign messages. (CVE-2017-1000385)
{ "availability": "No subscription required", "binaries": [ { "erlang-os-mon": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-erl-docgen": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-gs-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-diameter": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-parsetools-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-dev-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-xmerl-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-edoc": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-corba": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-eldap-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-webtool-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-percept-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-snmp-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-toolbar": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-megaco": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-base-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-megaco-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-pman": "1:16.b.3-dfsg-1ubuntu2.2", "erlang": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-appmon": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-gs": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-nox": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-observer": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-examples": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-crypto": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-parsetools": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-diameter-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-inets-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-dbg": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ssl-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-observer-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-base-hipe-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-debugger": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-inets": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-asn1-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-mode": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-xmerl": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-debugger-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-dev": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-odbc-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ic-java": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-asn1": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-public-key": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-runtime-tools-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-reltool-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-jinterface": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-src": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-typer": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-common-test": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-mnesia-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-public-key-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-common-test-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-mnesia": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-runtime-tools": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-crypto-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-doc": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-edoc-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-eldap": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-syntax-tools-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-syntax-tools": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-test-server": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-tv": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-reltool": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-snmp": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-eunit-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ic": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-x11": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-appmon-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-odbc": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-pman-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ssh-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-et-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-et": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-tv-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ic-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-webtool": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-manpages": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-base-hipe": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-eunit": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ssh": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-percept": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-dialyzer-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-toolbar-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-test-server-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-corba-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-ssl": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-erl-docgen-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-os-mon-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-tools": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-dialyzer": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-tools-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-typer-dbgsym": "1:16.b.3-dfsg-1ubuntu2.2", "erlang-base": "1:16.b.3-dfsg-1ubuntu2.2" } ] }
{ "availability": "No subscription required", "binaries": [ { "erlang-os-mon": "1:18.3-dfsg-1ubuntu3.1", "erlang-erl-docgen": "1:18.3-dfsg-1ubuntu3.1", "erlang-gs-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-diameter": "1:18.3-dfsg-1ubuntu3.1", "erlang-parsetools-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-dev-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-xmerl-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-edoc": "1:18.3-dfsg-1ubuntu3.1", "erlang-corba": "1:18.3-dfsg-1ubuntu3.1", "erlang-eldap-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-webtool-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-percept-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-snmp-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-megaco": "1:18.3-dfsg-1ubuntu3.1", "erlang-wx-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-base-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-megaco-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang": "1:18.3-dfsg-1ubuntu3.1", "erlang-gs": "1:18.3-dfsg-1ubuntu3.1", "erlang-nox": "1:18.3-dfsg-1ubuntu3.1", "erlang-observer": "1:18.3-dfsg-1ubuntu3.1", "erlang-examples": "1:18.3-dfsg-1ubuntu3.1", "erlang-crypto": "1:18.3-dfsg-1ubuntu3.1", "erlang-parsetools": "1:18.3-dfsg-1ubuntu3.1", "erlang-diameter-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-inets-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-dbg": "1:18.3-dfsg-1ubuntu3.1", "erlang-ssl-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-observer-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-base-hipe-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-debugger": "1:18.3-dfsg-1ubuntu3.1", "erlang-inets": "1:18.3-dfsg-1ubuntu3.1", "erlang-asn1-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-mode": "1:18.3-dfsg-1ubuntu3.1", "erlang-xmerl": "1:18.3-dfsg-1ubuntu3.1", "erlang-debugger-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-dev": "1:18.3-dfsg-1ubuntu3.1", "erlang-odbc-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-ic-java": "1:18.3-dfsg-1ubuntu3.1", "erlang-asn1": "1:18.3-dfsg-1ubuntu3.1", "erlang-public-key": "1:18.3-dfsg-1ubuntu3.1", "erlang-runtime-tools-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-reltool-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-jinterface": "1:18.3-dfsg-1ubuntu3.1", "erlang-src": "1:18.3-dfsg-1ubuntu3.1", "erlang-typer": "1:18.3-dfsg-1ubuntu3.1", "erlang-common-test": "1:18.3-dfsg-1ubuntu3.1", "erlang-mnesia-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-public-key-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-common-test-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-mnesia": "1:18.3-dfsg-1ubuntu3.1", "erlang-runtime-tools": "1:18.3-dfsg-1ubuntu3.1", "erlang-crypto-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-doc": "1:18.3-dfsg-1ubuntu3.1", "erlang-edoc-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-eldap": "1:18.3-dfsg-1ubuntu3.1", "erlang-syntax-tools-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-syntax-tools": "1:18.3-dfsg-1ubuntu3.1", "erlang-test-server": "1:18.3-dfsg-1ubuntu3.1", "erlang-eunit-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-reltool": "1:18.3-dfsg-1ubuntu3.1", "erlang-snmp": "1:18.3-dfsg-1ubuntu3.1", "erlang-ic": "1:18.3-dfsg-1ubuntu3.1", "erlang-x11": "1:18.3-dfsg-1ubuntu3.1", "erlang-percept": "1:18.3-dfsg-1ubuntu3.1", "erlang-odbc": "1:18.3-dfsg-1ubuntu3.1", "erlang-ssh-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-et-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-et": "1:18.3-dfsg-1ubuntu3.1", "erlang-webtool": "1:18.3-dfsg-1ubuntu3.1", "erlang-ic-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-manpages": "1:18.3-dfsg-1ubuntu3.1", "erlang-base-hipe": "1:18.3-dfsg-1ubuntu3.1", "erlang-eunit": "1:18.3-dfsg-1ubuntu3.1", "erlang-ssh": "1:18.3-dfsg-1ubuntu3.1", "erlang-dialyzer-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-test-server-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-corba-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-ssl": "1:18.3-dfsg-1ubuntu3.1", "erlang-erl-docgen-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-os-mon-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-tools": "1:18.3-dfsg-1ubuntu3.1", "erlang-wx": "1:18.3-dfsg-1ubuntu3.1", "erlang-dialyzer": "1:18.3-dfsg-1ubuntu3.1", "erlang-base": "1:18.3-dfsg-1ubuntu3.1", "erlang-tools-dbgsym": "1:18.3-dfsg-1ubuntu3.1", "erlang-typer-dbgsym": "1:18.3-dfsg-1ubuntu3.1" } ] }