CVE catalog

CVE-2026-23941

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is associated with program f

[CVE catalog]

Severity: Critical · CVSS 9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published: Mar 12, 2026, 11:00:00 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.47% · Oct 25, 2026

Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') vulnerability in Erlang OTP (inets httpd module) allows HTTP Request Smuggling. This vulnerability is associated with program files lib/inets/src/http_server/httpd_request.erl and program routines httpd_request:parse_headers/7. The server does not reject or normalize duplicate Content-Length headers. The earliest Content-Length in the request is used for body parsing while common reverse proxies (nginx, Apache httpd, Envoy) honor the last Content-Length value. This violates RFC 9112 Section 6.3 and allows front-end/back-end desynchronization, leaving attacker-controlled bytes queued as the start of the next request. This issue affects OTP from OTP 17.0 before OTP 28.4.1, OTP 27.3.4.9 and OTP 26.2.5.18, corresponding to inets from 5.10 before 9.6.1, 9.3.2.3 and 9.1.0.5.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	erlang	sid	`1:29.1.2+dfsg-1`	fixed
Debian	erlang	forky	`1:29.1.1+dfsg-1`	fixed
Debian	erlang	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	fixed
Debian	erlang	trixie-security	`1:27.3.4.1+dfsg-1+deb13u4`	fixed
Debian	erlang	bookworm	`1:25.2.3+dfsg-1+deb12u4`	fixed
Debian	erlang	bookworm-security	`1:25.2.3+dfsg-1+deb12u1`	vulnerable
Cpe	erlang	Not reported	Not reported	vulnerable
Ubuntu	erlang	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-asn1	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-base	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-common-test	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-crypto	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-debugger	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dev	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dialyzer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-diameter	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-doc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-edoc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eldap	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-erl-docgen	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-et	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eunit	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-examples	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-inets	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-jinterface	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-manpages	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-megaco	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mnesia	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mode	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-nox	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-observer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-odbc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-os-mon	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-parsetools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-public-key	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-reltool	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-runtime-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-snmp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-src	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssh	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-syntax-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-wx	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-x11	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-xmerl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	pro	`1:22.0.7+dfsg-1build1`	vulnerable
Ubuntu	erlang	pro	`1:22.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.4+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	fixed
Ubuntu	erlang	22.04	`1:23.2.6+dfsg-1build1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.4+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.6`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	fixed
Ubuntu	erlang	24.04	`1:25.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.2`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.5`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.6`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	26.04	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.3+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.4+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	fixed
Ubuntu	erlang	pro	`1:22.0.7+dfsg-1build1`	vulnerable
Ubuntu	erlang	pro	`1:22.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.4+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	fixed
Ubuntu	erlang	22.04	`1:23.2.6+dfsg-1build1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.4+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.6`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	fixed
Ubuntu	erlang	24.04	`1:25.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.2`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.5`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.6`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	25.10	`1:27.3+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	25.10	`1:27.3+dfsg-1ubuntu1.1`	vulnerable
Ubuntu	erlang	25.10	`1:27.3.4.1+dfsg-1`	vulnerable
Ubuntu	erlang	25.10	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	25.10	`1:27.3.4.1+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.3+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.4+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	erlang	source	sid	`1:27.3.4.9+dfsg-1`	not yet assigned	Not reported	[1130912]
Debian	erlang	source	forky	`1:27.3.4.9+dfsg-1`	not yet assigned	Not reported	[1130912]
Debian	erlang	source	trixie	`1:27.3.4.1+dfsg-1+deb13u2`	not yet assigned	Not reported	[1130912]
Debian	erlang	source	bookworm	`1:25.2.3+dfsg-1+deb12u4`	not yet assigned	Not reported	[1130912]
Ubuntu	erlang	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-asn1	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-base	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-common-test	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-crypto	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-debugger	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dev	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dialyzer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-diameter	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-doc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-edoc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eldap	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-erl-docgen	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-et	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eunit	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-examples	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-inets	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-jinterface	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-manpages	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-megaco	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mnesia	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mode	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-nox	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-observer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-odbc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-os-mon	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-parsetools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-public-key	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-reltool	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-runtime-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-snmp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-src	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssh	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-syntax-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-wx	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-x11	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-xmerl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang	deb	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	Not reported	USN-8827-1	Not reported
Ubuntu	erlang	deb	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	Not reported	USN-8827-1	Not reported
Ubuntu	erlang	deb	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	USN-8827-1	Not reported
Ubuntu	erlang	deb	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	Not reported	USN-8827-1	Not reported
Ubuntu	erlang	deb	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	Not reported	UBUNTU-CVE-2026-23941	Not reported
Ubuntu	erlang	deb	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	Not reported	UBUNTU-CVE-2026-23941	Not reported
Ubuntu	erlang	deb	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	UBUNTU-CVE-2026-23941	Not reported
Ubuntu	erlang	deb	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-23941	Not reported

[Debian bug #1130912]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[erlang]Affected
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-asn1]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-base]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-common-test]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-crypto]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-debugger]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dev]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dialyzer]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-diameter]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-doc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-edoc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eldap]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-erl-docgen]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-et]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eunit]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-examples]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-ftp]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-inets]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-jinterface]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-manpages]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Fixed · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected · Fixed: 1:25.2.3+dfsg-1+deb12u4
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

Next results

Observed: Oct 27, 2026, 9:30:01 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]