
CVE catalog
CVE-2026-73812
httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_bod
- Severity
- Critical · CVSS 9.1
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X - Published
- Updated
- Source
- [NVD] · [CVE record]
- EPSS
- 0.52% · Oct 23, 2026
httpd function check_header/3 rejects duplicate Content-Length (per CVE-2026-23941) but never checks for the TE+CL co-presence that RFC 9112 §6.3 identifies as a probable smuggling attempt. handle_body/3 frames by chunked and silently discards Content-Length. A CL-preferring front-end paired with chunked-preferring inets creates a classic CL.TE front-end/back-end desync. This issue affects OTP from OTP 17.0 before OTP 27.3.4.17, from OTP 28.0 before OTP 28.5.0.6, and from OTP 29.0 before OTP 29.0.6, corresponding to inets from 5.10 before 9.3.2.7, from 9.4 before 9.6.2.3, and from 9.7 before 9.7.2. Whether OTP before OTP 17.0, corresponding to inets before 5.10, is affected is unknown.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | erlang | sid | 1:29.1.1+dfsg-1 | fixed |
| Debian | erlang | forky | 1:29.1.1+dfsg-1 | fixed |
| Debian | erlang | trixie | 1:27.3.4.1+dfsg-1+deb13u3 | vulnerable |
| Debian | erlang | trixie-security | 1:27.3.4.1+dfsg-1+deb13u4 | fixed |
| Debian | erlang | bookworm | 1:25.2.3+dfsg-1+deb12u4 | vulnerable |
| Debian | erlang | bookworm-security | 1:25.2.3+dfsg-1+deb12u1 | vulnerable |
| Ubuntu | erlang | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-asn1 | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-base | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-common-test | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-crypto | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-debugger | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-dev | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-dialyzer | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-diameter | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-doc | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-edoc | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-eldap | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-erl-docgen | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-et | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-eunit | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-examples | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-ftp | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-inets | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-jinterface | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-manpages | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-megaco | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-mnesia | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-mode | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-nox | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-observer | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-odbc | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-os-mon | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-parsetools | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-public-key | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-reltool | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-runtime-tools | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-snmp | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-src | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-ssh | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-ssl | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-syntax-tools | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-tftp | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-tools | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-wx | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-x11 | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang-xmerl | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang | pro | 1:22.0.7+dfsg-1build1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.1+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.2+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.3+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.3+dfsg-2 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.4+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.2 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.3 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.4 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.5 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.5+esm1 | vulnerable |
| Ubuntu | erlang | pro | 1:22.2.7+dfsg-1ubuntu0.5+esm2 | fixed |
| Ubuntu | erlang | 22.04 | 1:23.2.6+dfsg-1build1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.1.1+dfsg-1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.1.4+dfsg-1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.1.5+dfsg-1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.1.5+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2+dfsg-1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.1 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.2 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.3 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.4 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.5 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.6 | vulnerable |
| Ubuntu | erlang | 22.04 | 1:24.2.1+dfsg-1ubuntu0.7 | fixed |
| Ubuntu | erlang | 24.04 | 1:25.2.3+dfsg-1 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu1 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu3 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.1 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.2 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.3 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.4 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.5 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.6 | vulnerable |
| Ubuntu | erlang | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.7 | fixed |
| Ubuntu | erlang | 26.04 | 1:27.3.4.1+dfsg-1build1 | vulnerable |
| Ubuntu | erlang | 26.04 | 1:27.3.4.3+dfsg-1 | vulnerable |
| Ubuntu | erlang | 26.04 | 1:27.3.4.4+dfsg-1 | vulnerable |
| Ubuntu | erlang | 26.04 | 1:27.3.4.6+dfsg-1 | vulnerable |
| Ubuntu | erlang | 26.04 | 1:27.3.4.6+dfsg-1ubuntu0.1 | fixed |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | erlang | source | sid | 1:29.0.6+dfsg-1 | not yet assigned | Not reported | [1146603] |
| Debian | erlang | source | forky | 1:29.0.6+dfsg-1 | not yet assigned | Not reported | [1146603] |
| Debian | erlang | source | trixie | 1:27.3.4.1+dfsg-1+deb13u4 | not yet assigned | Not reported | [1146603] |
| Debian | erlang | source | bookworm | (unfixed) | not yet assigned | Not reported | [1146603] |
| Ubuntu | erlang | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-asn1 | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-base | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-common-test | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-crypto | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-debugger | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-dev | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-dialyzer | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-diameter | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-doc | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-edoc | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-eldap | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-erl-docgen | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-et | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-eunit | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-examples | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-ftp | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-inets | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-jinterface | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-manpages | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-megaco | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-mnesia | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-mode | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-nox | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-observer | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-odbc | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-os-mon | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-parsetools | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-public-key | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-reltool | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-runtime-tools | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-snmp | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-src | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-ssh | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-ssl | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-syntax-tools | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-tftp | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-tools | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-wx | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-x11 | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang-xmerl | deb | noble | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | Not reported | Not reported |
| Ubuntu | erlang | deb | pro | 1:22.2.7+dfsg-1ubuntu0.5+esm2 | Not reported | UBUNTU-CVE-2026-73812 | Not reported |
| Ubuntu | erlang | deb | 22.04 | 1:24.2.1+dfsg-1ubuntu0.7 | Not reported | UBUNTU-CVE-2026-73812 | Not reported |
| Ubuntu | erlang | deb | 24.04 | 1:25.3.2.8+dfsg-1ubuntu4.7 | Not reported | UBUNTU-CVE-2026-73812 | Not reported |
| Ubuntu | erlang | deb | 26.04 | 1:27.3.4.6+dfsg-1ubuntu0.1 | Not reported | UBUNTU-CVE-2026-73812 | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [erlang]Affected
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-asn1]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-base]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-common-test]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-crypto]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-debugger]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-dev]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-dialyzer]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-diameter]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-doc]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-edoc]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-eldap]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-erl-docgen]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-et]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-eunit]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-examples]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-ftp]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-inets]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· amd64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· arm64 · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· amd64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· arm64 · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-jinterface]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
- [erlang-manpages]Affected
Source package: [erlang]
Details (4)
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u4· all · bookwormAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
1:25.2.3+dfsg-1+deb12u1· all · bookworm-securityAffected
nvd · erlang · debian · bookworm; nvd · erlang · debian · 12
Observed:
References
- [https://access.redhat.com/errata/RHSA-2026:62531]
- [https://nvd.nist.gov/vuln/detail/CVE-2026-73812]
- [https://osv.dev/vulnerability/DEBIAN-CVE-2026-73812]
- [https://osv.dev/vulnerability/UBUNTU-CVE-2026-73812]
- [https://security-tracker.debian.org/tracker/CVE-2026-73812]
- [https://ubuntu.com/security/notices/USN-8827-1]
- [https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-3146.json]
[CERT-Bund public advisories] · [Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [Ubuntu Security Notices (USN)]