diff options
| author | Jimmy Olgeni <olgeni@FreeBSD.org> | 2026-09-01 17:08:35 +0000 |
|---|---|---|
| committer | Jimmy Olgeni <olgeni@FreeBSD.org> | 2026-09-01 19:25:35 +0000 |
| commit | 5ff179de9e485a9f79b49ec94197e11e00117fa2 (patch) | |
| tree | 29b6014a78b8807f004844eb85b38f47d12de239 | |
| parent | ac1195b3e9401688f26905c86d5c25c3960d7cf5 (diff) | |
security/vuxml: Document CVE-2026-75538 in Erlang/OTP
| -rw-r--r-- | security/vuxml/vuln/2026.xml | 46 |
1 files changed, 46 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index 6ef26f5679ea..b51797d56078 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,49 @@ + <vuln vid="62b56853-a609-11f1-9195-4c526214c986"> + <topic>Erlang/OTP -- remote crash via gen_tcp with {packet,4}</topic> + <affects> + <package> + <name>erlang</name> + <range><lt>28.5.0.6,4</lt></range> + </package> + <package> + <name>erlang-runtime27</name> + <range><lt>27.3.4.17</lt></range> + </package> + <package> + <name>erlang-runtime28</name> + <range><lt>28.5.0.6</lt></range> + </package> + <package> + <name>erlang-runtime29</name> + <range><lt>29.0.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The OTP 29.0.6 release notes report:</p> + <blockquote cite="https://github.com/erlang/otp/releases/tag/OTP-29.0.6"> + <p>A gen_tcp socket using the inet driver and {packet,4} had + a bug if receiving a packet with size just below INT_MAX.</p> + <p>That packet size wrapped in size calculations and made the + received data overwrite its allocation and trash allocator + metadata and subsequent block(s), causing the VM to crash.</p> + <p>This made it possible for anyone to remotely crash an + Erlang node that used {packet,4} on a reachable socket.</p> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-75538</cvename> + <url>https://github.com/erlang/otp/releases/tag/OTP-29.0.6</url> + <url>https://github.com/erlang/otp/releases/tag/OTP-28.5.0.6</url> + <url>https://github.com/erlang/otp/releases/tag/OTP-27.3.4.17</url> + </references> + <dates> + <discovery>2026-09-01</discovery> + <entry>2026-09-01</entry> + </dates> + </vuln> + <vuln vid="16cb13dc-a55d-11f1-bf98-a8a1599412c6"> <topic>chromium -- security fixes</topic> <affects> |