An issue was discovered in Erlang/OTP 18.x. Erlang's generation of compiled regular expressions is vulnerable to a heap overflow. Regular expressions using a malformed extpattern can indirectly specify an offset that is used as an array index. This ordinal permits arbitrary regions within the erts_alloc arena to be both read and written to.

The remote Redhat Enterprise Linux 6 host has one or more packages installed that are affected by a vulnerability that has been acknowledged by the vendor but will not be patched.

  - erlang: Heap-buffer overflow via regular expressions (CVE-2016-10253)

Note that Nessus has not tested for this issue but has instead relied on the package manager's report that the package is installed.

This plugin has been deprecated as it does not adhere to established standards for this style of check.

An update of the erlang package has been released.

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3571-1 advisory.

    It was discovered that the Erlang FTP module incorrectly handled certain CRLF sequences. A remote attacker     could possibly use this issue to inject arbitrary FTP commands. This issue only affected Ubuntu 14.04 LTS.
    (CVE-2014-1693)

    It was discovered that Erlang incorrectly checked CBC padding bytes. A remote attacker could possibly use     this issue to perform a padding oracle attack and decrypt traffic. This issue only affected Ubuntu 14.04     LTS. (CVE-2015-2774)

    It was discovered that Erlang incorrectly handled certain regular expressions. A remote attacker could     possibly use this issue to cause Erlang to crash, resulting in a denial of service, or execute arbitrary     code. This issue only affected Ubuntu 16.04 LTS. (CVE-2016-10253)

    Hanno Bck, Juraj Somorovsky and Craig Young discovered that the Erlang otp TLS server incorrectly     handled error reporting. A remote attacker could possibly use this issue to perform a variation of the     Bleichenbacher attack and decrypt traffic or sign messages. (CVE-2017-1000385)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for erlang fixes security issues and bugs.

The following vulnerabilities were addressed :

  - CVE-2017-1000385: Harden against the Bleichenbacher     attacher against RSA 

  - CVE-2016-10253: Heap overflow through regular     expressions (bsc#1030062)

In addition Erlang was updated to version 18.3.4.6, containing a number of upstream bug fixes and improvements.

Security fix for CVE-2016-10253

----

  - Ver. 19.3

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security fix for CVE-2016-10253

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Severity
198449	RHEL 6 : erlang (Unpatched Vulnerability)	Nessus	Red Hat Local Security Checks	critical
195541	RHEL 6 : erlang (Unpatched Vulnerability) (deprecated)	Nessus	Red Hat Local Security Checks	critical
136030	Photon OS 1.0: Erlang PHSA-2020-1.0-0289	Nessus	PhotonOS Local Security Checks	critical
135906	Photon OS 2.0: Erlang PHSA-2020-2.0-0231	Nessus	PhotonOS Local Security Checks	critical
106838	Ubuntu 14.04 LTS / 16.04 LTS : Erlang vulnerabilities (USN-3571-1)	Nessus	Ubuntu Local Security Checks	critical
105241	openSUSE Security Update : erlang (openSUSE-2017-1358) (ROBOT)	Nessus	SuSE Local Security Checks	critical
101719	Fedora 26 : erlang (2017-cbed8f4169)	Nessus	Fedora Local Security Checks	critical
99143	Fedora 25 : erlang (2017-42ebcac2b5)	Nessus	Fedora Local Security Checks	critical
99108	Fedora 24 : erlang (2017-e2480c7f50)	Nessus	Fedora Local Security Checks	critical

Detections

Analytics

CVE-2016-10253

critical

Tenable Plugins

critical

critical

critical

critical

critical

critical

critical

critical

critical