CVE-2020-35733: High severity erlang/otp vulnerability
Published Jan 15, 2021
·Updated
An issue was discovered in Erlang/OTP before 23.2.2. The ssl application 10.2 accepts and trusts an invalid X.509 certificate chain to a trusted root Certification Authority.
Affected Software
2 affected components
Erlang Erlang\/otp<23.2.2
Fedoraproject Fedora=33
Event History
Jan 15, 2021
CVE Published
via MITRE·01:35 PM
Data Sourced
via MITRE·01:35 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2020-35733?
CVE-2020-35733 is classified as a high-severity vulnerability due to its potential to allow man-in-the-middle attacks.
2
How do I fix CVE-2020-35733?
To fix CVE-2020-35733, upgrade Erlang/OTP to version 23.2.2 or later.
3
Which versions of Erlang/OTP are affected by CVE-2020-35733?
CVE-2020-35733 affects Erlang/OTP versions prior to 23.2.2.
4
Does CVE-2020-35733 affect Fedora systems?
Yes, CVE-2020-35733 affects Fedora version 33 specifically.
5
What component is specifically vulnerable in CVE-2020-35733?
The ssl application version 10.2 is specifically vulnerable in CVE-2020-35733.