CVE catalog

CVE-2026-59251

Severity: Critical · CVSS 9.1CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Published: Jul 27, 2026, 4:17:49 PM UTC
Source: [NVD] · [CVE record]
EPSS: 0.32% · Oct 23, 2026

Allocation of resources without limits in Erlang/OTP public_key certificate path validation allows a remote unauthenticated attacker to cause denial of service by sending a crafted X.509 certificate chain during the TLS handshake. During RFC 5280 policy processing in public_key:pkix_path_validation/3, the certificate policy tree maintained by pubkey_policy_tree grows without an upper bound. When a certificate chain contains M policies per certificate and K certificates, the tree grows on the order of M^K nodes because pubkey_policy_tree:add_leaves/2 and pubkey_policy_tree:add_leaf_siblings/2 extend the tree per policy per certificate. A modest chain with many policies per certificate is enough to pin BEAM schedulers and exhaust the node's memory, taking down the entire VM. The attacker only needs to be able to present a certificate chain to the victim, which is the normal precondition for a TLS handshake, so exploitation succeeds against any incoming or outgoing TLS connection that validates the peer's chain (the default for SSL/TLS clients and mutual-TLS servers). This is the same vulnerability class as OpenSSL's X509_verify_cert policy tree DoS. This vulnerability is associated with program files lib/public_key/src/pubkey_policy_tree.erl and program routines pubkey_policy_tree:add_leaves/2 and pubkey_policy_tree:add_leaf_siblings/2. This issue affects OTP from OTP 26.2 before OTP 29.0.4, OTP 28.5.0.4 and OTP 27.3.4.15, corresponding to public_key from 1.15 before 1.21.4, 1.20.3.4 and 1.17.1.5.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

Distribution	Package	Release	Version	Status
Debian	erlang	sid	`1:29.1.1+dfsg-1`	fixed
Debian	erlang	forky	`1:29.1.1+dfsg-1`	fixed
Debian	erlang	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	fixed
Debian	erlang	trixie-security	`1:27.3.4.1+dfsg-1+deb13u4`	fixed
Debian	erlang	bookworm	`1:25.2.3+dfsg-1+deb12u4`	vulnerable
Debian	erlang	bookworm-security	`1:25.2.3+dfsg-1+deb12u1`	vulnerable
Ubuntu	erlang	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-asn1	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-base	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-common-test	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-crypto	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-debugger	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dev	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-dialyzer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-diameter	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-doc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-edoc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eldap	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-erl-docgen	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-et	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-eunit	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-examples	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-inets	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-jinterface	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-manpages	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-megaco	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mnesia	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-mode	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-nox	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-observer	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-odbc	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-os-mon	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-parsetools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-public-key	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-reltool	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-runtime-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-snmp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-src	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssh	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-ssl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-syntax-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tftp	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-tools	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-wx	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-x11	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang-xmerl	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	fixed
Ubuntu	erlang	26.04	`1:27.3.4.1+dfsg-1build1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.3+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.4+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1`	vulnerable
Ubuntu	erlang	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	fixed

Fixed-version evidence

Distribution	Package	Type	Release	Fixed version	Urgency	Origin	Bugs
Debian	erlang	source	sid	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	forky	`1:29.0.4+dfsg-1`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	trixie	`1:27.3.4.1+dfsg-1+deb13u3`	not yet assigned	Not reported	[1142985]
Debian	erlang	source	bookworm	`(unfixed)`	not yet assigned	Not reported	[1142985]
Ubuntu	erlang	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-asn1	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-base	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-common-test	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-crypto	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-debugger	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dev	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-dialyzer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-diameter	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-doc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-edoc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eldap	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-erl-docgen	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-et	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-eunit	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-examples	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-inets	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-jinterface	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-manpages	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-megaco	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mnesia	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-mode	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-nox	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-observer	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-odbc	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-os-mon	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-parsetools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-public-key	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-reltool	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-runtime-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-snmp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-src	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssh	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-ssl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-syntax-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tftp	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-tools	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-wx	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-x11	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang-xmerl	deb	noble	`1:25.3.2.8+dfsg-1ubuntu4.7`	Not reported	Not reported	Not reported
Ubuntu	erlang	deb	26.04	`1:27.3.4.6+dfsg-1ubuntu0.1`	Not reported	UBUNTU-CVE-2026-59251	Not reported

[Debian bug #1142985]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

[erlang]Affected
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-asn1]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-base]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-common-test]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-crypto]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-debugger]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dev]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-dialyzer]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-diameter]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-doc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-edoc]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eldap]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-erl-docgen]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-et]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-eunit]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-examples]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-ftp]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-inets]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · amd64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · arm64 · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · amd64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · arm64 · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-jinterface]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
[erlang-manpages]Affected
Source package: [erlang]
Details (4)
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u4 · all · bookworm
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- 1:25.2.3+dfsg-1+deb12u1 · all · bookworm-security
  Affected
  nvd · erlang · debian · bookworm; nvd · erlang · debian · 12

Next results

Observed: Oct 24, 2026, 11:09:19 AM UTC

References

[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX] · [Ubuntu Security Notices (USN)]