diff options
| author | Jimmy Olgeni <olgeni@FreeBSD.org> | 2026-09-01 20:02:03 +0000 |
|---|---|---|
| committer | Jimmy Olgeni <olgeni@FreeBSD.org> | 2026-09-01 20:02:03 +0000 |
| commit | 8d731c8d43e7ee7cd595aa30e42ef0b61be8ad6e (patch) | |
| tree | 0dccbd2006d90a333fa0fb0d8c85fd60a9e4b69b | |
| parent | ee1a7d634d3872a322d40e1981c73fac6ed25f07 (diff) | |
security/vuxml: Document remaining Erlang/OTP vulnerabilities
Upstream published 16 advisories alongside OTP 29.0.6, 28.5.0.6 and
27.3.4.17. CVE-2026-75538 already had an entry; add a combined one for
the other 15, which share the same affected packages and fixed versions.
Most are in the inets httpd and httpc implementations: HTTP request
smuggling, two mod_auth authentication bypasses and several denial of
service issues, plus unbounded integer conversion in stdlib, snmp and
eldap.
Also add the now-published GHSA reference to the CVE-2026-75538 entry.
| -rw-r--r-- | security/vuxml/vuln/2026.xml | 86 |
1 files changed, 86 insertions, 0 deletions
diff --git a/security/vuxml/vuln/2026.xml b/security/vuxml/vuln/2026.xml index b51797d56078..c76239e29d8a 100644 --- a/security/vuxml/vuln/2026.xml +++ b/security/vuxml/vuln/2026.xml @@ -1,3 +1,88 @@ + <vuln vid="e9dfc357-a63f-11f1-9195-4c526214c986"> + <topic>Erlang/OTP -- multiple vulnerabilities in inets, stdlib, snmp and eldap</topic> + <affects> + <package> + <name>erlang</name> + <range><lt>28.5.0.6,4</lt></range> + </package> + <package> + <name>erlang-runtime27</name> + <range><lt>27.3.4.17</lt></range> + </package> + <package> + <name>erlang-runtime28</name> + <range><lt>28.5.0.6</lt></range> + </package> + <package> + <name>erlang-runtime29</name> + <range><lt>29.0.6</lt></range> + </package> + </affects> + <description> + <body xmlns="http://www.w3.org/1999/xhtml"> + <p>The Erlang/OTP project reports:</p> + <blockquote cite="https://github.com/erlang/otp/security/advisories"> + <p>OTP 29.0.6, 28.5.0.6 and 27.3.4.17 fix the following + issues, most of them in the inets httpd and httpc + implementations:</p> + <ul> + <li>CVE-2026-55951: httpc Memory Exhaustion via Unbounded Header Accumulation.</li> + <li>CVE-2026-59696: stdlib: Denial-of-Service enabled by Unbounded Integer Conversion.</li> + <li>CVE-2026-66357: HTTP Request Smuggling via obs-fold Header Continuation in httpd.</li> + <li>CVE-2026-66835: Possible directory protection bypass in Erlang-OTP inets httpd.</li> + <li>CVE-2026-69664: Denial of Service via Malformed Chunk Size in httpd.</li> + <li>CVE-2026-70399: Denial of Service via Unenforced Default max_clients Limit in httpd.</li> + <li>CVE-2026-70405: snmp: Denial-of-Service enabled by Unbounded Integer Conversion.</li> + <li>CVE-2026-70409: eldap: Denial-of-Service enabled by Unbounded Integer Conversion.</li> + <li>CVE-2026-71380: Denial of Service via Body-Read Timeout Gap in httpd (Slowloris Variant).</li> + <li>CVE-2026-71562: inets: Denial-of-Service enabled by Unbounded Integer Conversion.</li> + <li>CVE-2026-73270: Authentication Bypass via Case-Insensitive Filesystem Path Matching in httpd mod_auth.</li> + <li>CVE-2026-73276: HTTP Request Smuggling via Whitespace-Before-Colon Header Dropping in httpd.</li> + <li>CVE-2026-73812: HTTP Request Smuggling via Transfer-Encoding and Content-Length in httpd.</li> + <li>CVE-2026-74835: Memory Exhaustion via Unenforced max_body_size During Chunked Body Reception in httpd.</li> + <li>CVE-2026-74994: Authentication Bypass via Directory Namespace Collapse in httpd mod_auth (dets/mnesia backends).</li> + </ul> + </blockquote> + </body> + </description> + <references> + <cvename>CVE-2026-55951</cvename> + <cvename>CVE-2026-59696</cvename> + <cvename>CVE-2026-66357</cvename> + <cvename>CVE-2026-66835</cvename> + <cvename>CVE-2026-69664</cvename> + <cvename>CVE-2026-70399</cvename> + <cvename>CVE-2026-70405</cvename> + <cvename>CVE-2026-70409</cvename> + <cvename>CVE-2026-71380</cvename> + <cvename>CVE-2026-71562</cvename> + <cvename>CVE-2026-73270</cvename> + <cvename>CVE-2026-73276</cvename> + <cvename>CVE-2026-73812</cvename> + <cvename>CVE-2026-74835</cvename> + <cvename>CVE-2026-74994</cvename> + <url>https://github.com/erlang/otp/security/advisories/GHSA-f9fw-mg7q-4g3x</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-8qw4-2chm-mvj2</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-qh2f-33hj-37qf</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-r4vv-vc2c-2fw6</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-mr35-8h7w-w3gq</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-pwvh-c689-f8q5</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-q7cq-pfgf-5hr7</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-9vgh-c8cm-m9p4</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-5vp4-58hc-h8cc</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-cqx9-9hq6-m8wf</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-mh78-93cr-jx8f</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-6v7q-jwgh-cx8p</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-7j6m-4ffg-hg46</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-8qrh-x566-5xv5</url> + <url>https://github.com/erlang/otp/security/advisories/GHSA-c3cq-q8x6-547g</url> + </references> + <dates> + <discovery>2026-09-01</discovery> + <entry>2026-09-01</entry> + </dates> + </vuln> + <vuln vid="62b56853-a609-11f1-9195-4c526214c986"> <topic>Erlang/OTP -- remote crash via gen_tcp with {packet,4}</topic> <affects> @@ -34,6 +119,7 @@ </description> <references> <cvename>CVE-2026-75538</cvename> + <url>https://github.com/erlang/otp/security/advisories/GHSA-8m6r-2pj2-25pm</url> <url>https://github.com/erlang/otp/releases/tag/OTP-29.0.6</url> <url>https://github.com/erlang/otp/releases/tag/OTP-28.5.0.6</url> <url>https://github.com/erlang/otp/releases/tag/OTP-27.3.4.17</url> |