CVE catalog

CVE-2026-55953

Severity: Critical · CVSS 9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published: Jul 27, 2026, 3:21:29 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.23% · Oct 25, 2026

The Erlang/OTP ssl TLS 1.2 (and earlier) and DTLS client does not verify that the cipher suite selected by the server in ServerHello was among the suites offered by the client in ClientHello. The client-side tls_handshake:hello/5 handler validates the negotiated protocol version and the downgrade sentinel but hands the server-chosen suite directly to ssl_handshake:handle_server_hello_extensions/9, which installs it without a membership check. The TLS 1.3 client path performs this check (per RFC 8446), so it is not affected. An on-path attacker between the client and the intended server can respond with a ServerHello selecting an anonymous key exchange suite such as TLS_DH_anon_* or TLS_ECDH_anon_* that the client never offered. Anonymous suites do not require the server to present a certificate, so the entire verify_peer and cacerts configuration is bypassed: the attacker completes the handshake with its own ephemeral parameters, no certificate is validated, no hostname is checked, and ssl:connect returns {ok, Socket}. All subsequent application traffic is readable and modifiable by the attacker. This issue affects OTP from OTP 17.0 before OTP 27.3.4.15, from OTP 28.0 before OTP 28.5.0.4, and from OTP 29.0 before OTP 29.0.4, corresponding to ssl from 5.3.4 before 11.2.12.11, from 11.3 before 11.6.0.4, and from 11.7 before 11.7.4. Whether OTP before OTP 17.0, corresponding to ssl before 5.3.4, is affected is unknown.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	erlang	sid	`1:29.1.2+dfsg-1`	fixed
Debian	erlang	forky	`1:29.1.1+dfsg-1`	fixed
Debian	erlang	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	fixed
Debian	erlang	trixie-security	`1:27.3.4.1+dfsg-1+deb13u4`	fixed
Debian	erlang	bookworm	`1:25.2.3+dfsg-1+deb12u4`	vulnerable
Debian	erlang	bookworm-security	`1:25.2.3+dfsg-1+deb12u1`	vulnerable
Cpe	erlang\/otp	Not reported	`29.0.4`	fixed
Cpe	erlang\/ssl	Not reported	`11.7.4`	fixed
Ubuntu	erlang	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-asn1	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-base	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-common-test	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-crypto	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-debugger	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dev	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dialyzer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-diameter	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-doc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-edoc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eldap	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-erl-docgen	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-et	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eunit	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-examples	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-inets	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-jinterface	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-manpages	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-megaco	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mnesia	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mode	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-nox	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-observer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-odbc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-os-mon	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-parsetools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-public-key	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-reltool	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-runtime-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-snmp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-src	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssh	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-syntax-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-wx	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-x11	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-xmerl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	pro	`1:22.0.7+dfsg-1build1`	vulnerable
Ubuntu	erlang	pro	`1:22.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.2+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.3+dfsg-2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.4+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm1`	vulnerable
Ubuntu	erlang	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	fixed
Ubuntu	erlang	22.04	`1:23.2.6+dfsg-1build1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.4+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.1.5+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.1`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.2`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.3`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.4`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.5`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.6`	vulnerable
Ubuntu	erlang	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	fixed
Ubuntu	erlang	24.04	`1:25.2.3+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.1`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.2`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.3`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.4`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.5`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.6`	vulnerable
Ubuntu	erlang	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	26.04	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.3+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.4+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	erlang	source	sid	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	forky	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1142985]
Cpe	erlang\/otp	cpe	Not reported	`29.0.4`	Not reported	NVD-CVE-2026-55953	Not reported
Cpe	erlang\/ssl	cpe	Not reported	`11.7.4`	Not reported	NVD-CVE-2026-55953	Not reported
Ubuntu	erlang	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-asn1	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-base	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-common-test	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-crypto	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-debugger	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dev	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dialyzer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-diameter	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-doc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-edoc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eldap	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-erl-docgen	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-et	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eunit	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-examples	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-inets	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-jinterface	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-manpages	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-megaco	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mnesia	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mode	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-nox	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-observer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-odbc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-os-mon	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-parsetools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-public-key	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-reltool	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-runtime-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-snmp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-src	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssh	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-syntax-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-wx	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-x11	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-xmerl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang	deb	pro	`1:22.2.7+dfsg-1ubuntu0.5+esm2`	Not reported	UBUNTU-CVE-2026-55953	Not reported
Ubuntu	erlang	deb	22.04	`1:24.2.1+dfsg-1ubuntu0.7`	Not reported	UBUNTU-CVE-2026-55953	Not reported
Ubuntu	erlang	deb	24.04	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	UBUNTU-CVE-2026-55953	Not reported
Ubuntu	erlang	deb	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-55953	Not reported

[Debian bug #1142985]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[erlang]Affected
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-asn1]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-base]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-common-test]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-crypto]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-debugger]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dev]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dialyzer]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-diameter]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-doc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-edoc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eldap]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-erl-docgen]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-et]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eunit]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-examples]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-ftp]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-inets]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-jinterface]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-manpages]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

Next results

Observed: Oct 27, 2026, 7:11:33 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]