{ "document" : { "aggregate_severity" : { "text" : "mittel" }, "category" : "csaf_base", "csaf_version" : "2.0", "distribution" : { "tlp" : { "label" : "WHITE", "url" : "https://www.first.org/tlp/" } }, "lang" : "de-DE", "notes" : [ { "category" : "legal_disclaimer", "text" : "Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen." }, { "category" : "description", "text" : "Erlang/OTP (Open Telecom Platform) ist eine Sammlung von Bibliotheken und Tools, die auf der Programmiersprache Erlang basieren und für den Aufbau skalierbarer, fehlertoleranter und verteilter Systeme entwickelt wurden.", "title" : "Produktbeschreibung" }, { "category" : "summary", "text" : "Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Erlang/OTP ausnutzen, um einen Denial of Service Angriff durchzuführen.", "title" : "Angriff" }, { "category" : "general", "text" : "- Linux\n- Sonstiges\n- UNIX", "title" : "Betroffene Betriebssysteme" } ], "publisher" : { "category" : "other", "contact_details" : "csaf-provider@cert-bund.de", "name" : "Bundesamt für Sicherheit in der Informationstechnik", "namespace" : "https://www.bsi.bund.de" }, "references" : [ { "category" : "self", "summary" : "WID-SEC-W-2025-0419 - CSAF Version", "url" : "https://wid.cert-bund.de/.well-known/csaf/white/2025/wid-sec-w-2025-0419.json" }, { "category" : "self", "summary" : "WID-SEC-2025-0419 - Portal Version", "url" : "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2025-0419" }, { "category" : "external", "summary" : "Erlang GitHub vom 2025-02-20", "url" : "https://github.com/erlang/otp/security/advisories/GHSA-78cv-45vx-q6fr" }, { "category" : "external", "summary" : "Red Hat Bugzilla vom 2025-02-20", "url" : "https://bugzilla.redhat.com/show_bug.cgi?id=2346900" }, { "category" : "external", "summary" : "Ubuntu Security Notice USN-7313-1 vom 2025-03-03", "url" : "https://ubuntu.com/security/notices/USN-7313-1" }, { "category" : "external", "summary" : "SUSE Security Update SUSE-SU-2025:0901-1 vom 2025-03-18", "url" : "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020535.html" }, { "category" : "external", "summary" : "SUSE Security Update SUSE-SU-2025:1051-1 vom 2025-03-28", "url" : "https://lists.suse.com/pipermail/sle-security-updates/2025-March/020619.html" }, { "category" : "external", "summary" : "Debian Security Advisory DSA-5906 vom 2025-04-20", "url" : "https://lists.debian.org/debian-security-announce/2025/msg00068.html" }, { "category" : "external", "summary" : "Debian Security Advisory DLA-4132 vom 2025-04-21", "url" : "https://lists.debian.org/debian-lts-announce/2025/04/msg00028.html" } ], "source_lang" : "en-US", "title" : "Erlang/OTP: Schwachstelle ermöglicht Denial of Service", "tracking" : { "current_release_date" : "2025-04-21T22:00:00.000+00:00", "generator" : { "date" : "2025-04-22T08:39:55.534+00:00", "engine" : { "name" : "BSI-WID", "version" : "1.3.12" } }, "id" : "WID-SEC-W-2025-0419", "initial_release_date" : "2025-02-20T23:00:00.000+00:00", "revision_history" : [ { "date" : "2025-02-20T23:00:00.000+00:00", "number" : "1", "summary" : "Initiale Fassung" }, { "date" : "2025-03-03T23:00:00.000+00:00", "number" : "2", "summary" : "Neue Updates von Ubuntu aufgenommen" }, { "date" : "2025-03-18T23:00:00.000+00:00", "number" : "3", "summary" : "Neue Updates von SUSE aufgenommen" }, { "date" : "2025-03-30T22:00:00.000+00:00", "number" : "4", "summary" : "Neue Updates von SUSE aufgenommen" }, { "date" : "2025-04-21T22:00:00.000+00:00", "number" : "5", "summary" : "Neue Updates von Debian aufgenommen" } ], "status" : "final", "version" : "5" } }, "product_tree" : { "branches" : [ { "branches" : [ { "category" : "product_name", "name" : "Debian Linux", "product" : { "name" : "Debian Linux", "product_id" : "2951", "product_identification_helper" : { "cpe" : "cpe:/o:debian:debian_linux:-" } } } ], "category" : "vendor", "name" : "Debian" }, { "branches" : [ { "branches" : [ { "category" : "product_version_range", "name" : "<25.3.2.18", "product" : { "name" : "Open Source Erlang/OTP <25.3.2.18", "product_id" : "T041363" } }, { "category" : "product_version", "name" : "25.3.2.18", "product" : { "name" : "Open Source Erlang/OTP 25.3.2.18", "product_id" : "T041363-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:erlang:erlang%2fotp:25.3.2.18" } } }, { "category" : "product_version_range", "name" : "<26.2.5.9", "product" : { "name" : "Open Source Erlang/OTP <26.2.5.9", "product_id" : "T041364" } }, { "category" : "product_version", "name" : "26.2.5.9", "product" : { "name" : "Open Source Erlang/OTP 26.2.5.9", "product_id" : "T041364-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:erlang:erlang%2fotp:26.2.5.9" } } }, { "category" : "product_version_range", "name" : "<27.2.4", "product" : { "name" : "Open Source Erlang/OTP <27.2.4", "product_id" : "T041365" } }, { "category" : "product_version", "name" : "27.2.4", "product" : { "name" : "Open Source Erlang/OTP 27.2.4", "product_id" : "T041365-fixed", "product_identification_helper" : { "cpe" : "cpe:/a:erlang:erlang%2fotp:27.2.4" } } } ], "category" : "product_name", "name" : "Erlang/OTP" } ], "category" : "vendor", "name" : "Open Source" }, { "branches" : [ { "category" : "product_name", "name" : "SUSE Linux", "product" : { "name" : "SUSE Linux", "product_id" : "T002207", "product_identification_helper" : { "cpe" : "cpe:/o:suse:suse_linux:-" } } } ], "category" : "vendor", "name" : "SUSE" }, { "branches" : [ { "category" : "product_name", "name" : "Ubuntu Linux", "product" : { "name" : "Ubuntu Linux", "product_id" : "T000126", "product_identification_helper" : { "cpe" : "cpe:/o:canonical:ubuntu_linux:-" } } } ], "category" : "vendor", "name" : "Ubuntu" } ] }, "vulnerabilities" : [ { "cve" : "CVE-2025-26618", "product_status" : { "known_affected" : [ "T041363", "2951", "T002207", "T000126", "T041365", "T041364" ] }, "release_date" : "2025-02-20T23:00:00.000+00:00", "title" : "CVE-2025-26618" } ] }