USN-7313-1: Erlang vulnerability
Published Mar 3, 2025
·Updated
It was discovered that Erlang incorrectly handled SFTP packet sizes. A remote attacker could possibly use this issue to cause Erlang to consume resources, resulting in a denial of service.
Affected Software
16 affected componentsFixes available
All of the following
ubuntu/erlang<1:25.3.2.12+dfsg-1ubuntu2.1
1:25.3.2.12+dfsg-1ubuntu2.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/erlang-ssh<1:25.3.2.12+dfsg-1ubuntu2.1
1:25.3.2.12+dfsg-1ubuntu2.1
Ubuntu Ubuntu=24.10
All of the following
ubuntu/erlang<1:25.3.2.8+dfsg-1ubuntu4.1
1:25.3.2.8+dfsg-1ubuntu4.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/erlang-ssh<1:25.3.2.8+dfsg-1ubuntu4.1
1:25.3.2.8+dfsg-1ubuntu4.1
Ubuntu Ubuntu=24.04
All of the following
ubuntu/erlang<1:24.2.1+dfsg-1ubuntu0.2
1:24.2.1+dfsg-1ubuntu0.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/erlang-ssh<1:24.2.1+dfsg-1ubuntu0.2
1:24.2.1+dfsg-1ubuntu0.2
Ubuntu Ubuntu=22.04
All of the following
ubuntu/erlang<1:22.2.7+dfsg-1ubuntu0.3
1:22.2.7+dfsg-1ubuntu0.3
Ubuntu Ubuntu=20.04
All of the following
ubuntu/erlang-ssh<1:22.2.7+dfsg-1ubuntu0.3
1:22.2.7+dfsg-1ubuntu0.3
Ubuntu Ubuntu=20.04
Event History
Mar 3, 2025
Advisory Published
via Ubuntu·12:00 AM
Frequently Asked Questions
1
What is the severity of USN-7313-1?
The severity of USN-7313-1 is considered high due to the risk of denial of service.
2
How do I fix USN-7313-1?
To fix USN-7313-1, you should upgrade to the patched versions of the 'erlang' or 'erlang-ssh' packages listed in the advisory.
3
Which versions of Erlang are affected by USN-7313-1?
USN-7313-1 affects multiple versions of Erlang, specifically those earlier than the patched versions specified in the advisory.
4
Is USN-7313-1 a remote attack vector?
Yes, USN-7313-1 describes a vulnerability that can be exploited by remote attackers through SFTP packet size handling.
5
What operating systems are impacted by USN-7313-1?
USN-7313-1 specifically impacts Ubuntu 20.04, 22.04, 24.04, and 24.10 with specified versions of Erlang.