Erlang/OTP before 18.0-rc1 does not properly check CBC padding bytes when terminating connections, which makes it easier for man-in-the-middle attackers to obtain cleartext data via a padding-oracle attack, a variant of CVE-2014-3566 (aka POODLE).

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3571-1 advisory.

    It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker     could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2014-1693)

    It was discovered that Erlang incorrectly checked CBC padding bytes. A remote attacker could possibly use     this issue to perform a padding oracle attack and decrypt traffic. This issue only affected Ubuntu 14.04     LTS. (CVE-2015-2774)

    It was discovered that Erlang incorrectly handled certain regular expressions. A remote attacker could     possibly use this issue to cause Erlang to crash, resulting in a denial of service, or execute arbitrary     code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10253)

    Hanno Bck, Juraj Somorovsky and Craig Young discovered that the Erlang otp TLS server incorrectly     handled error reporting. A remote attacker could possibly use this issue to perform a variation of the     Bleichenbacher attack and decrypt traffic or sign messages. (CVE-2017-1000385)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security fix for CVE-2015-2774

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for erlang fixes the following issues :

  - CVE-2015-2774: Erlang/OTP was vulnerable to Poodle in     its TLS-1.0 implementation - removed default support for     SSL 3.0 and added padding check for TLS 1.0 (boo#924915)

Security fix for CVE-2015-2774

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
106838	Ubuntu 14.04 LTS / 16.04 LTS : Erlang vulnerabilities (USN-3571-1)	Nessus	Ubuntu Local Security Checks	critical
92048	Fedora 23 : erlang (2015-33583e5029)	Nessus	Fedora Local Security Checks	medium
88920	openSUSE Security Update : erlang (openSUSE-2016-245)	Nessus	SuSE Local Security Checks	medium
85472	Fedora 21 : erlang-17.4-4.fc21 (2015-12970)	Nessus	Fedora Local Security Checks	medium
85470	Fedora 22 : erlang-17.4-4.fc22 (2015-12923)	Nessus	Fedora Local Security Checks	medium

Detections

Analytics

CVE-2015-2774

medium

Tenable Plugins

critical

medium

medium

medium

medium