CVE-2017-1000385: Medium severity Erlang Erlang\/otp vulnerability
An erlang TLS server configured with cipher suites using rsa key exchange, may be vulnerable to an Adaptive Chosen Ciphertext attack (AKA Bleichenbacher attack) against RSA, which when exploited, may result in plaintext recovery of encrypted messages and/or a Man-in-the-middle (MiTM) attack, despite the attacker not having gained access to the server’s private key itself.
References:
https://groups.google.com/forum/#!topic/erlang-programming/J0LH-j6fRlM
Other sources
The Erlang otp TLS server answers with different TLS alerts to different error types in the RSA PKCS #1 1.5 padding. This allows an attacker to decrypt content or sign messages with the server's private key (this is a variation of the Bleichenbacher attack).
— Launchpad
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2017-1000385?
CVE-2017-1000385 is considered a high-severity vulnerability due to the potential for plaintext recovery and Man-in-the-middle attacks.
How do I fix CVE-2017-1000385?
To fix CVE-2017-1000385, upgrade your Erlang installation to a version greater than 20.1.7 or to specific Debian packages like 1:23.2.6+dfsg-1+deb11u1.
What applications are affected by CVE-2017-1000385?
CVE-2017-1000385 affects Erlang versions 18.3.4.7, 19.3.6.4, and 20.1.7, as well as Debian systems running vulnerable Erlang packages.
What type of attack can be executed via CVE-2017-1000385?
CVE-2017-1000385 potentially allows for an Adaptive Chosen Ciphertext attack which can lead to plaintext message recovery.
Is CVE-2017-1000385 a local or remote vulnerability?
CVE-2017-1000385 is a remote vulnerability as it can be exploited over network connections targeting the configured TLS server.